TechFlow news: On April 28, SlowMist reported that ZetaChain has been exploited. Preliminary analysis indicates the root cause lies in the call function of its GatewayZEVM contract, which lacks access control and input validation—enabling any user to initiate cross-chain calls via GatewayZEVM and execute arbitrary operations on external chains through relayers. Specifically, attackers constructed malicious calls on ZetaChain to trigger cross-chain events; these events were then captured by ZetaChain’s relayer and executed as malicious calls on target chains via Threshold Signature Scheme (TSS), resulting in unauthorized fund transfers.
Add to Favorites
Share to Social Media
