ZetaChain, a Layer 1 network, stated that on April 24th, the attack targeted a vulnerability in its cross chain message pipeline. The attacker exploited three issues in the cross chain message system and stole $333868 from three internal team wallets, mainly USDC and USDT, involving 9 transactions on Ethereum, Arbitrarum, Base, and BSC chains, without causing any loss of user funds. ZetaChain stated that attackers exploited vulnerabilities such as insufficient arbitrary call restrictions, GatewayEVM contract receiving most commands including transferFrom, and users who had previously deposited tokens through GatewayEVM. sediment() granting unlimited authorization without revocation; This attack is not an opportunistic attack, and the attacker invests a lot of time and resources in preparation before execution. ZetaChain has deployed patches on the main network, but the cross chain transaction function is still suspended and will be reactivated after the upgrade and additional review are completed. It is recommended that users who have interacted with the ZetaChain gateway contract revoke the relevant ERC-20 authorization. （The Block） https://(wublock123.com)/news/zetachain-gatewayevm-exploit-loss-333900-usd-user-funds-safe-60297