According to CoinMeta, monitoring by SlowMist, a contract GebProxyActions experienced a security breach due to a lack of caller access control, resulting in the theft of approximately 5.94 ETH. The affected users directly invoked gebproxyactions.quitsystem instead of using dsproxy for delegated calls, which led to ownssafe [ safe ] being set as the GebProxyActions contract. Attackers then directly invoked gebproxyactions.quitsystem ( manager , safe , dst ) to bypass the gebsafemanager's safeallowed checks and transferred the collateral to their own accounts.