Foom.Cash exploit drains 24.28T FOOM tokens and about $2.26M across Ethereum and Base

On February 26 2026, Foom.Cash, an Ethereum-based privacy protocol promoted as an evolution of Tornado Cash, suffered an exploit that led to losses of roughly $2.26 million in tokens. An attacker allegedly abused a misconfigured Groth16 zkSNARK verifier across Ethereum and Base, enabling forged proofs that drained 24.28 trillion FOOM tokens, with about $427,000 taken by the exploiter and around $1.83 million shifted in a white-hat rescue. The team has not yet publicly outlined remediation steps or the full impact.