ZetaChain revealed a $334,000 hack due to a vulnerability in its cross-chain messaging system, affecting only internal wallets.
ZetaChain has disclosed details regarding a hacking incident that occurred on April 27, resulting in a loss of $333,868. The breach stemmed from a vulnerability in its cross-chain messaging system, specifically targeting the GatewayEVM contract, which facilitates interactions between different networks.
"Cross-chain ZETA transfers were not affected, and no user funds were compromised, as the attack impacted only ZetaChain-controlled wallets," the team stated.
ā ZetaChain š© (@ZetaChain) April 29, 2026
The attack involved sophisticated planning, including funding through Tornado Cash and employing address spoofing techniques. The compromised wallets belonged to internal developers, and the attacker executed nine transactions to withdraw funds across several blockchain platforms, including Ethereum and BSC.
ZetaChain identified three main factors that facilitated the hack: the network's architecture allowed arbitrary calls with minimal restrictions, the GatewayEVM processed a broad range of commands that included asset transfers on behalf of other addresses, and old approvals for token withdrawals were not revoked, allowing the attacker to exploit these permissions.
In response to the incident, ZetaChain has implemented a patch to its mainnet and has advised users to revoke any old ERC-20 token approvals to enhance security.
Other Recent Exploits
In a related security incident, the Ethereum-based project Syndicate also experienced a hack on April 28, reportedly linked to its Commons cross-chain bridge. The attack resulted in unusual movements of SYND tokens, with losses estimated at around $330,000 as confirmed by CertiK specialists.
"We are investigating unusual movements in SYND tokens that may indicate a possible security issue," the Syndicate team announced.
ā Syndicate (@syndicateio) April 29, 2026
Following the exploit, the price of SYND tokens plummeted by more than 36% to $0.02. Additionally, CertiK reported a separate hack involving the Aftermath Finance exchange, where approximately $900,000 in USDC was drained, although the team stated that other marketplace products remained secure.
These incidents highlight ongoing vulnerabilities in the DeFi sector, prompting calls for enhanced security measures across platforms.
