Gnosis Pay Hit with Module Attack
Victims will be reimbursed, but questions about the attack vector remain.
Cointelegraph·

Gnosis Pay faces an active exploit in its delay module as co‑founder Martin Köppelmann walks back a warning urging users to withdraw funds and vows to repay those affected.
Read full articleVictims will be reimbursed, but questions about the attack vector remain.
A bug in Gnosis Pay’s delay module allowed attackers to drain user funds. Gnosis co-founder confirms full reimbursements are coming. A security flaw hit Gnosis Pay, and users felt it fast. The bug targeted the platform’s Zodiac delay module, a feature built to protect transactions with a three-minute cooldown. Instead of blocking attacks, the module […] The post Gnosis Pay Bug Drains User Funds Despite Built-In Security Delay appeared first on Live Bitcoin News.
Co-founder Martin Köppelmann said the company will make all users whole after attackers exploited the smart-contract module that governs Gnosis Pay card accounts. No loss figure has been disclosed.
The post Exploit Alert: Gnosis Under Active Attack, Users Urged to Withdraw Funds appeared on BitcoinEthereumNews.com. Users are being urged to withdraw their assets right away due to a serious security incident that has occurred within the Gnosis ecosystem. Concerns regarding the security of user funds were raised when blockchain security company PeckShieldAlert discovered an active exploit impacting Gnosis Pay. Martin Köppelmann, a co-founder of Gnosis, publicly urged users to remove all funds held through Gnosis Pay, amplifying the warning. The problem, according to Köppelmann, is caused by a flaw in the platform’s delay module, which is a feature intended to give transactions and account operations an extra degree of security. Ripple Releases 1 Billion XRP, How Many Are Left? Another Shiba Inu (SHIB) Recovery Attempt, Bitcoin (BTC) Reaches ‘Oversold’ State, First Near Protocol (NEAR) Support Activation: Crypto Market Review “Unfortunately, I must advise that all funds (EURe and GNO
The post Gnosis Pay exploit tied to Zodiac delay module as users exit appeared on BitcoinEthereumNews.com. Gnosis Pay users were urged to withdraw funds after an active exploit linked to the platform’s Zodiac delay module, according to posts from Gnosis co-founder Martin Köppelmann and blockchain security firm PeckShield. Summary Gnosis Pay users were told to withdraw EURe and GNO after a delay module exploit. Köppelmann said the bug lets an attacker initiate transactions from Safes using the module. Gnosis said it would cover user losses while asking bridge validators to pause activity. “If you are a Gnosis Pay user – unfortunately I have to recommend: withdraw all funds (EURe and GNO),” Martin Köppelmann said on X. He said the delay module has a bug and warned that users “might be affected.” The post told users to move both EURe and GNO from Gnosis Pay while the team worked on the issue. “Users are strongly urged to withdraw all funds (EURe and GNO),” PeckShield said in a separate al
Gnosis Pay users were urged to withdraw EURe and GNO after a Zodiac delay module bug let an attacker initiate Safe transactions.
CertiK says May is the third month so far in 2026 to record crypto losses under $100 million.
The post Gravity Bridge Loses $5,4M in Suspected Key Compromise Attack appeared on BitcoinEthereumNews.com. According to blockchain security researchers, the incident may have been caused by a compromised contract key, which allowed an attacker to withdraw millions in USDC, WETH, USDT, and PAXG. After the exploit, the Gravity Bridge team halted bridge operations and instructed validators to stop their validators and orchestrators while the incident is investigated. Hackers Steal $5.4M From Gravity Bridge Gravity Bridge, a decentralized cross-chain protocol that enables asset transfers between the Ethereum and Cosmos ecosystems, suffered a major security incident that resulted in the loss of approximately $5.4 million worth of digital assets. The exploit was first identified by on-chain analyst Specter, who reported unusual outflows from the protocol and suggested that the bridge’s contract key may have been compromised. According to Specter, the suspected compromise allowed an attacker