Digital Asset
Intelligence
Security Incident

GebProxyActions Smart Contract Vulnerability: $14.00K Reported Loss

·Historical incident record

Incident Overview

The GebProxyActions contract was exploited due to missing caller access control in the quitSystem function. Victims had previously called it directly instead of via DSProxy delegatecall, setting ownsSAFE[safe] to the GebProxyActions contract. The attacker called GebProxyActions.quitSystem(manager, safe, dst) directly, bypassing GebSafeManager’s safeAllowed check and transferring collateral to themselves.

Sources & References

Original incident referencehttps://x.com/SlowMist_Team/status/2094986310683705835 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSeed Phrase Leakage
    Reported loss$ 452,000
  2. Incident date
    Target

    Ankr

    Attack methodSmart Contract Vulnerability
    Reported loss$ 410,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed