ZetaChain Suffers Exploit, Vulnerability Likely Originates from GatewayZEVM Call Function Defect

Odaily News, SlowMist stated that ZetaChain has suffered an exploit. Preliminary analysis indicates the root cause of the vulnerability lies in the lack of access control and input validation in the call function of the GatewayZEVM contract. Attackers can exploit this to launch malicious cross-chain calls and execute arbitrary operations through the relayer mechanism to transfer funds on the target chain.

SlowMist reported that the attacker triggered the relayer to execute malicious calls by forging cross-chain events, thereby stealing funds. The relevant attack transactions have now been disclosed.