---
id: 8464
title: "GnosisPay Incident Analysis"
source_domain: certik.com
source_url: "https://www.certik.com/blog/gnosispay-incident-analysis"
published_at: "2026-06-04T22:00:00Z"
tags: ["web3", "analysis", "incident-analysis", "incident", "signature-verification", "gnosispay", "delay-module", "r-s-v", "gnosis-chain", "safe", "eip-1271"]
phying_url: "https://phying.com/item/8464"
lang: en
---

# GnosisPay Incident Analysis

## Summary

On 01 June 2026 an attacker drained dozens of GnosisPay Safes on Gnosis Chain. The attack vector was a signature-verification flaw in the GnosisPay Delay module.

## Intelligence Metadata

- **Sources:** certik.com
- **Published:** 2026-06-04T22:00:00Z
- **Original:** https://www.certik.com/blog/gnosispay-incident-analysis
- **Phying News:** https://phying.com/item/8464