Key facts
- Gnosis Pay was exploited through its Zodiac delay module.
- Attackers were able to initiate transactions from Safe wallets.
- The specific details of how the exploit was carried out are still under investigation.
Gnosis Pay, a service that links self-custody crypto wallets to a Visa-connected card product, has been exploited. The vulnerability was found in its Zodiac delay module, a security feature designed to add a waiting period to transactions. Attackers were able to bypass this delay mechanism, allowing them to initiate unauthorized transactions directly from user Safe wallets. The full technical details of the exploit are still under investigation.