BTC $77,315.87 -1.69%
ETH $2,407.19 -2.62%
BNB $686.49 -0.94%
XRP $1.34 -2.95%
SOL $99.84 -3.78%
TRX $0.3217 -2.96%
DOGE $0.0812 -2.45%
ADA $0.1962 -2.17%
BCH $248.08 +0.07%
LINK $11.16 -2.50%
HYPE $82.69 -1.83%
AAVE $130.22 +3.30%
SUI $0.7200 -1.62%
XLM $0.1751 -1.58%
ZEC $832.45 -2.71%
BTC $77,315.87 -1.69%
ETH $2,407.19 -2.62%
BNB $686.49 -0.94%
XRP $1.34 -2.95%
SOL $99.84 -3.78%
TRX $0.3217 -2.96%
DOGE $0.0812 -2.45%
ADA $0.1962 -2.17%
BCH $248.08 +0.07%
LINK $11.16 -2.50%
HYPE $82.69 -1.83%
AAVE $130.22 +3.30%
SUI $0.7200 -1.62%
XLM $0.1751 -1.58%
ZEC $832.45 -2.71%

SlowMist: GebProxyActions contract access control vulnerability led to the theft of 5.9436 ETH

2026-09-02 11:12:52

According to SlowMist's monitoring, the GebProxyActions contract suffered a loss of approximately 5.9436 ETH due to a lack of caller access control. Affected users previously called GebProxyActions.quitSystem directly instead of through a DSProxy delegated call, resulting in ownsSAFE[safe] being set to the GebProxyActions contract.

The attacker directly called GebProxyActions.quitSystem(manager, safe, dst), bypassing the safeAllowed check of GebSafeManager and transferring the collateral to themselves.

app_icon
ChainCatcher Building the Web3 world with innovations.