On June 1, 2026, Gnosis Pay's Zodiac modules were exploited via a flawed ERC-1271 signature verification check that failed to validate contract call success. The attack affected 5,281 wallets, but Gnosis detected it within 2 hours and refunded users 100%.

Gnosis Pay disclosed a bug in its Delay Module that was being actively exploited. The Delay Module provides a security timelock for transactions in Gnosis Pay’s self-custodial card system. Users were urgently advised to withdraw their EURe and GNO balances immediately. The Gnosis team confirmed that affected users will be fully reimbursed.