Gnosis Pay Exploited Via Signature Verification Flaw on June 1, 1.5M USD Stolen and Refunded

According to Gnosis, the Gnosis Pay service suffered a security vulnerability on June 1 that allowed attackers to exploit signature verification flaws in Zodiac's Delay Module and Roles Module. Hackers used the defect in ERC-1271 signature validation logic to forge withdrawal authorizations and drain approximately 1.5 million USD from user wallets.

Gnosis has covered all losses and completed user refunds. The company has restored over 99% of services and expanded security audits and dependency monitoring.