Hack history / 2026 / Hack or exploit
GebProxyActions
Hack or exploit on Sep 1, 2026 · Smart Contract Vulnerability
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$14K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,198
among thefts by dollars lost
What happened
The GebProxyActions contract was exploited due to missing caller access control in the quitSystem function. Victims had previously called it directly instead of via DSProxy delegatecall, setting ownsSAFE[safe] to the GebProxyActions contract. The attacker called GebProxyActions.quitSystem(manager, safe, dst) directly, bypassing GebSafeManager’s safeAllowed check and transferring collateral to themselves.
Details
- Date
- Sep 1, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- Ethereum
Reported by
Related incidents
RsETHSafeModule 2026 · Hack or exploit · $7.7M
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
Cite this page
SwanBluechip, "GebProxyActions hack, Sep 1, 2026: $14K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht824e948742/ (data as of 2026-10-31).