BTC $77,543.27 -1.46%
ETH $2,412.44 -2.46%
BNB $687.52 -0.85%
XRP $1.35 -2.65%
SOL $100.16 -3.36%
TRX $0.3216 -3.18%
DOGE $0.0814 -2.12%
ADA $0.1976 -1.68%
BCH $248.79 +0.44%
LINK $11.20 -2.02%
HYPE $82.93 -1.56%
AAVE $129.19 +3.03%
SUI $0.7224 -1.54%
XLM $0.1755 -1.30%
ZEC $839.52 -2.03%
BTC $77,543.27 -1.46%
ETH $2,412.44 -2.46%
BNB $687.52 -0.85%
XRP $1.35 -2.65%
SOL $100.16 -3.36%
TRX $0.3216 -3.18%
DOGE $0.0814 -2.12%
ADA $0.1976 -1.68%
BCH $248.79 +0.44%
LINK $11.20 -2.02%
HYPE $82.93 -1.56%
AAVE $129.19 +3.03%
SUI $0.7224 -1.54%
XLM $0.1755 -1.30%
ZEC $839.52 -2.03%

SlowMist: GebProxyActions contract access control vulnerability led to the theft of 5.9436 ETH

2026-09-02 11:12:52

According to SlowMist's monitoring, the GebProxyActions contract suffered a loss of approximately 5.9436 ETH due to a lack of caller access control. Affected users previously called GebProxyActions.quitSystem directly instead of through a DSProxy delegated call, resulting in ownsSAFE[safe] being set to the GebProxyActions contract.

The attacker directly called GebProxyActions.quitSystem(manager, safe, dst), bypassing the safeAllowed check of GebSafeManager and transferring the collateral to themselves.

app_icon
ChainCatcher Building the Web3 world with innovations.