ZetaChain was attacked by exploiting vulnerabilities or defects in GatewayZEVM call functions

Slow Fog issued a document stating that ZetaChain was attacked and exploited. Preliminary analysis showed that the root cause of the vulnerability lies in the GatewayZEVM contract call function lacking access control and input verification. Attackers can use this to initiate malicious cross-chain calls and use the relay mechanism to perform arbitrary operations on the target chain to transfer funds. Slowfog claimed that the attacker forged cross-chain events to trigger the repeater to perform malicious calls, thereby completing the theft of funds. Currently, the relevant attack transaction has been disclosed.