Woofun AI reports that Zodiac has published a security incident analysis concerning the Zodiac Roles Modifier. The disclosure identifies a critical vulnerability within the ERC-1271 transaction signature verification logic as the root cause of the breach.

The flaw stems from the system's reliance solely on the returned 'magic value' to determine signature validity, without verifying whether the underlying call was successful. This oversight enabled attackers to disguise failed verifications as valid signatures, effectively bypassing the module authentication mechanism.