SlowMist has released a preliminary analysis of the recent attack on the GatewayZEVM contract, identifying a critical vulnerability in the contract's call function. This function lacks proper access control and input validation, allowing any user to construct malicious cross-chain calls. These calls can then be executed on the target chain via a relayer, posing significant security risks.