Security Incident
GebProxyActions Smart Contract Vulnerability: $14.00K Reported Loss
The GebProxyActions contract was exploited due to missing caller access control in the quitSystem function.
- Reported loss
- $ 14,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
Victims had previously called it directly instead of via DSProxy delegatecall, setting ownsSAFE[safe] to the GebProxyActions contract. The attacker called GebProxyActions.quitSystem(manager, safe, dst) directly, bypassing GebSafeManager’s safeAllowed check and transferring collateral to themselves.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.