Zodiac is a tool tracked by ThreatCluster, appearing in 3 threat clusters built from 4 intelligence report mentions.
Zodiac is a tool tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed June 1, 2026; most recent activity June 20, 2026.
Gnosis Pay is currently experiencing an active exploit linked to its Zodiac delay module, which allows attackers to execute unauthorized transactions from Safe wallets. Users are urged to withdraw their EURe and GNO…
Gnosis Pay experienced an exploit on June 1, 2026, affecting its delay module, which controls transaction permissions for users' Safe wallets. Co-founder Martin Köppelmann confirmed that the attacker could initiate…
On June 20, 2026, the Zodiac team disclosed a security flaw in the ERC-1271 transaction signature verification logic. The vulnerability allows the system to determine signature validity based solely on a returned 'magic…
Zodiac is a tool tracked by ThreatCluster, appearing in 3 threat clusters built from 4 intelligence report mentions.
The most recent intelligence report mentioning Zodiac on ThreatCluster is dated June 20, 2026. Activity was first observed June 1, 2026, giving a tracked span from then to June 20, 2026.
Across ThreatCluster reporting, Zodiac most frequently co-occurs with Data Breach, Base, Ethereum, Gnosis, Safe, among 11 tracked related entities.
The most significant recent cluster is “Gnosis Pay Exploit: Urgent Withdrawal Advisory for Users” (2 articles · Updated June 1, 2026). Zodiac appears across 3 threat clusters in total, listed above with sources.
Zodiac appears in 4 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.