On September 15, an unknown attacker targeted a Safe wallet on Ethereum, kicking off a withdrawal of about 2,900 rsETH—worth roughly $7.73 million. The exploit was spotted by the Blockaid team. According to their report, the withdrawal transaction got front-run by the MEV bot Yoink, which managed to execute its own transaction before the hacker and snatched the assets.

What Went Down

The attack on the unidentified Safe wallet triggered a withdrawal operation for approximately 2,900 rsETH. The total loss is estimated at around $7.73 million. The attacker’s identity remains unknown.

How Yoink the MEV Bot Got Involved

Yoink, the MEV bot, detected the pending withdrawal and slipped in its own transaction right ahead of the attacker’s. This move let the bot move the assets out before the malicious transaction could go through.

Blockaid’s Take on the Attack Mechanics

Blockaid says the attack involved using a public keeper multicall to push a custom Safe module—linked to a Uniswap v4 LP—into a hooked pool created by the attacker. The hook itself handled unwrapping the assets. Blockaid puts the confirmed amount of lost rsETH at about $7.73 million.