GCSA Insight: 9 Vulnerabilities and Security Risks Identified in Cross-Chain Smart Contracts In early November 2026, Web3Labs Agent, a security research system operated by the Global Cybersecurity Alliance (GCSA), conducted routine automated security scans of smart contracts across multiple blockchains, including Ethereum, Asset Chain, PEPU L2, QIE, and Lens Chain. Combined with manual read-only reviews and local Anvil fork testing, the investigation identified 9 notable vulnerabilities and security risks. This edition of GCSA Insight examines a range of security issues, including callback authentication, ERC-4337 signature binding, duplicate reward claims, contract initialization, weak randomness, EIP-7702 delegated execution, and account permission controls. Some findings were reproduced in local fork environments, demonstrating potential asset transfers or unintended contract behavior. Others are subject to specific privilege requirements, legacy protocol conditions, or third-party component configurations. Importantly, no exploit transactions were broadcast to production blockchains during this research. The findings reflect conditions observed at the time of testing and do not imply that the vulnerabilities have been exploited in the wild or remain active at the time of publication. 🔗 Read the full report: #GCSAInsight# #GCSACybersecurity# #GCSASecVibe# · Stay Connected with GCSA Follow GCSA's official social media channels for the latest news, product launches, research developments, and ecosystem updates. GCSA Official WeChat Account: GCSA Official Telegram Channel: