•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
On April 24, ZetaChain disclosed an exploit affecting its cross-chain messaging system that enabled an attacker to drain $333,868 in assets from internal team wallets. The layer-1 network confirmed the incident in a post-mortem, stating that the losses were limited to internal team wallets and did not impact user funds.
The attack centered on the GatewayEVM contract, described as a unified entry point for interactions between external networks and ZetaChain applications. The post-mortem said the system allowed users to request “arbitrary calls” with minimal restrictions, while the receiving contract accepted commands such as “transferFrom” without sufficient validation.
In addition, the report noted that users who deposited tokens via GatewayEVM.deposit() did not revoke the unlimited spending approvals they had granted. The attacker combined these conditions to move funds.
ZetaChain reported that the theft occurred across nine transactions spanning four networks: Ethereum, Arbitrum, Base, and BSC. The losses were composed primarily of USDC and USDT.
ZetaChain said the incident was not opportunistic. According to the post-mortem, the attacker funded their wallet through Tornado Cash approximately three days before the exploit to conceal the origin of funds. The attacker also conducted a brute-force effort to generate a vanity address resembling one of the victims’ addresses, using an address poisoning approach to obscure malicious activity.
After executing the exploit, the attacker converted the stolen USDC and USDT into ETH quickly.
ZetaChain deployed a patch on mainnet to address the vulnerability. The cross-chain transaction functionality was suspended immediately after the incident and remains inactive until additional updates and reviews are completed.
The team also recommended that all users who have interacted with the gateway contracts revoke the pending ERC-20 permissions granted to those addresses.
Premium gym chains are entering a “golden era” that is ending or already in decline, as rising operating costs collide with shifting consumer preferences toward more flexible, community-based ways to exercise. Long-term memberships are shrinking, margins are pressured by higher rents and facility expenses, and competition from smaller, more personalized…
