Gnosis Pay Faces Active Exploit Tied to Zodiac Delay Module
Gnosis Pay is under active exploit tied to the Zodiac delay module, prompting containment measures including requests for bridge validators to pause and a temporary halt to normal user actions. CEO Martin Koppelmann pledged Gnosis will cover user losses, which may limit immediate panic selling but does not remove technical uncertainty about exposure. The flaw allows an attacker to initiate transactions from Safe wallets that include the vulnerable module; the bug is in Gnosis Pay rather than Safe’s core contracts. The incident follows a recent $3.2 million drain from 86 Safe wallets via a third‑party module, heightening concerns about module risk and potential contagion across self‑custodial services and bridged flows. Market impact: reduced on‑chain liquidity and paused bridge activity could temporarily suppress token flows and increase volatility for tokens tied to Gnosis Pay and affected bridges until a full accounting is complete.