SquidRouterModule, a third-party Gnosis Safe module for Squid Router, was exploited via a verification error in executeSameChainActions(). The function accepted a publicly available constant string as proof of message security. An attacker with this fixed string could impersonate Safe wallet owners and execute arbitrary calldata to drain 86 Gnosis Safe vaults over two hours, consolidating ~$3.2M worth into DAI.