Gnosis Pay Attributes $1.5M Exploit to October 2023 Software Flaw
Gnosis Pay identified a software vulnerability dating to October 2023 as the cause of a $1.5 million exploit of its card safe infrastructure. The company confirmed all affected users have been fully reimbursed and published a postmortem detailing the flaw.
Key Takeaways
- 1## The Vulnerability and Its Scope Gnosis Pay disclosed that a software flaw introduced in October 2023 created a pathway for the $1.
- 25 million hack of its card safe infrastructure.
- 3The company published a postmortem document outlining how the vulnerability was exploited and the timeline of its discovery and remediation.
- 4## Reimbursement Status Gnosis Pay confirmed that all users affected by the exploit have been fully reimbursed.
- 5The company did not specify the number of affected accounts or the distribution of losses across them in the available statement.
The Vulnerability and Its Scope
Gnosis Pay disclosed that a software flaw introduced in October 2023 created a pathway for the $1.5 million hack of its card safe infrastructure. The company published a postmortem document outlining how the vulnerability was exploited and the timeline of its discovery and remediation.
Reimbursement Status
Gnosis Pay confirmed that all users affected by the exploit have been fully reimbursed. The company did not specify the number of affected accounts or the distribution of losses across them in the available statement.
Why It Matters
For Traders
The full reimbursement limits immediate contagion risk, but the exploit's size and cause suggest protocol-level risk that may weigh on Gnosis token sentiment short-term.
For Investors
A five-month delay between vulnerability introduction and discovery raises questions about Gnosis's security audit and monitoring practices, relevant to infrastructure risk assessment.
For Builders
Card-safe integrations on Gnosis or any chain must now reassess their vulnerability disclosure and patching cadences; slow remediation timelines are a material operational risk.
