ZetaChain’s $334K Gateway Exploit: How a Chained Vulnerability Drained Team Wallets Across 4 Chains

TLDR: ZetaChain’s GatewayEVM arbitrary call flaw allowed attackers to drain $333,868 across four blockchains. All three wallets drained were ZetaChain-controlled; no external user funds were lost in the exploit. The attacker brute-forced a vanity address with 13 matching characters to execute an address poisoning attack. A bug bounty report flagging this vulnerability was previously dismissed [...]

The post ZetaChain’s $334K Gateway Exploit: How a Chained Vulnerability Drained Team Wallets Across 4 Chains appeared first on Blockonomi.