PANews reported on March 24 that Conflux tweeted that a serious vulnerability was found in the CREATE2 opcode, which was identified and resolved in the V2.5 upgrade (March 17, 2025). The vulnerability allowed the contract to be redeployed on an existing address, affecting Gnosis Safe. The vulnerability did not cause any loss of user funds.