About 5.9436 ETH in collateral was stolen in an apparent exploit of Reflexer Finance’s GEB stablecoin system. The vulnerability involved GebProxyActions and its quitSystem function, which was intended to be called through DSProxy delegation. A user instead called the function directly, causing ownsSAFE[safe] to record GebProxyActions as the SAFE’s owner rather than the user. An attacker then directly called GebProxyActions.quitSystem(manager, safe, dst), bypassed GebSafeManager’s safeAllowed check and transferred the collateral to the attacker’s address. Reflexer Finance, the DeFi protocol behind the RAI stablecoin, had not publicly commented on the incident at the time of the report. The case highlights how assumptions about proxy-based interactions can create access-control weaknesses and why security reviews should test unusual transaction paths alongside core contract logic.