Gnosis Pay Exploit Targets Delay Module, User Losses Expected

Gnosis Pay experienced an exploit on June 1, 2026, affecting its delay module, which controls transaction permissions for users' Safe wallets. Co-founder Martin Köppelmann confirmed that the attacker could initiate transactions from wallets utilizing this module. Gnosis has pledged to cover all user losses, though the exact amount taken and number of affected accounts remain undisclosed. The exploit follows a recent incident where $3 million was drained from 86 Safe wallets due to a separate vulnerability. Gnosis is actively working to contain the damage and has requested bridge validators to pause operations to limit further losses. Blockchain security firm PeckShield has advised users to check their exposure and withdraw funds where possible. The incident highlights vulnerabilities in smart contract-based payment systems, emphasizing the need for robust security measures.

Key Points: • Gnosis Pay's delay module exploit allows unauthorized transaction initiation from Safe wallets. • Gnosis has committed to reimbursing all affected users, though the extent of losses is still unclear. • This incident follows a previous exploit draining $3 million from 86 Safe wallets.