BTC $79,715.44 +0.42%
ETH $2,458.44 +0.12%
BNB $766.64 +7.04%
XRP $1.41 +1.06%
SOL $102.68 +1.22%
TRX $0.3336 +1.25%
DOGE $0.0875 +3.70%
ADA $0.2173 +1.72%
BCH $249.98 -0.32%
LINK $11.90 +2.03%
HYPE $85.20 +0.99%
AAVE $131.28 +0.02%
SUI $0.7977 +6.56%
XLM $0.1855 +3.66%
ZEC $1,015.48 +3.86%
BTC $79,715.44 +0.42%
ETH $2,458.44 +0.12%
BNB $766.64 +7.04%
XRP $1.41 +1.06%
SOL $102.68 +1.22%
TRX $0.3336 +1.25%
DOGE $0.0875 +3.70%
ADA $0.2173 +1.72%
BCH $249.98 -0.32%
LINK $11.90 +2.03%
HYPE $85.20 +0.99%
AAVE $131.28 +0.02%
SUI $0.7977 +6.56%
XLM $0.1855 +3.66%
ZEC $1,015.48 +3.86%

SlowMist: GebProxyActions contract access control vulnerability led to the theft of 5.9436 ETH

2026-09-02 11:12:52

According to SlowMist's monitoring, the GebProxyActions contract suffered a loss of approximately 5.9436 ETH due to a lack of caller access control. Affected users previously called GebProxyActions.quitSystem directly instead of through a DSProxy delegated call, resulting in ownsSAFE[safe] being set to the GebProxyActions contract.

The attacker directly called GebProxyActions.quitSystem(manager, safe, dst), bypassing the safeAllowed check of GebSafeManager and transferring the collateral to themselves.

app_icon
ChainCatcher Building the Web3 world with innovations.