GoPlus Security 🚦 (@GoPlusSecurity): 🧵1/ 6
Estimated coin impact
Scores are not price-change percentages. High impact means a score of +70 or more, or -70 or less.
🧵1/ 6 🚨 GoPlus Security Alert: ZetaChain Exploited — Revoke Permissions to the Vulnerable Contract Immediately! On April 26, 2026, the call() function in @ZetaChain’s contract on #ZetaChain lacked access control and failed to validate the message parameter. Meanwhile, the execute() function in its contract on #Ethereum lacked validation of the data parameter. The attacker exploited this vulnerability and, through an attack contract, stole USDC that victim EOA addresses had approved to the vulnerable contract 0x48b9 (Ethereum GatewayEVM Proxy). Please immediately revoke token approvals granted to the vulnerable contract 0x48b9aacc350b20147001f88821d31731ba4c30ed (Ethereum GatewayEVM Proxy) to prevent your tokens from being stolen!