Gnosis Pay Warns of Active Exploit in Zodiac Delay Module, Users Told to Withdraw EURe and GNO
Gnosis Pay users are being urged to withdraw funds immediately after an active exploit was tied to the platform's Zodiac delay module, according to statements from Gnosis co-founder Martin Köppelmann and blockchain security firm PeckShield.
"If you are a Gnosis Pay user – unfortunately I have to recommend: withdraw all funds (EURe and GNO)," Köppelmann wrote on X, saying the delay module contains a bug and users "might be affected." PeckShield issued a similar warning, advising users to "check your exposure" and withdraw EURe and GNO.
Gnosis Pay uses Safe-based accounts that depend on smart contract modules. Köppelmann later said the issue sits in the Zodiac delay module, with the attacker reportedly able to initiate transactions from Safes that rely on that module. Under normal conditions, the Delay Module enforces a short waiting period for outgoing transfers so users can react before transactions finalize; the flaw appears to allow that protection to be bypassed.
Gnosis said it is taking steps to limit impact, including requesting bridge validators to pause activity to slow or prevent cross-chain movement of potentially affected funds. Köppelmann also said "Gnosis will cover all user losses." No total loss figure had been published at the time of the warnings, and the team has not released a full postmortem or an accounting of affected accounts.
Gnosis Pay offers a self-custody card for spending crypto at Visa merchants, linking on-chain wallets to real-world payments through smart-contract-controlled accounts. That setup relies on modules such as Delay and Roles to manage permissions and timing, leaving user funds directly exposed when core modules are vulnerable.
Gnosis Pay has not been described as shut down. Köppelmann and PeckShield continue to recommend that users withdraw EURe and GNO while containment work continues. Users are advised to follow official Gnosis updates and review any connected Safes for suspicious transactions.
