MEV Bot Front-Runs $7.8M rsETH Exploit on Ethereum
Blockaid said the attacker used a custom Safe module and a Uniswap v4 liquidity pool, but Yoink intercepted about $7.73 million in rsETH.
- On September 15, an attacker attempted to exploit a custom module on an Ethereum Safe wallet to extract about $7.73 million in tokens, but an MEV bot intercepted the funds before the attacker could take control.
- According to security firm Blockaid, the attacker used a public keeper multicall to direct a custom Uniswap v4 liquidity module into a hooked pool, where tokens were unwrapped during the exploitation attempt.
- Etherscan data shows the MEV bot Yoink front-ran the attacker, capturing the tokens and transferring about 18.93 ETH, worth roughly $46,000, to a block builder address in the same transaction.
- Kelp, the protocol behind the tokens, placed the receiving address under a 24-hour pause, temporarily preventing further transfers as a precautionary wallet-level measure.
- Kelp stated that its own contracts remain safe and fully backed, with minting and withdrawals continuing normally while the team works with security experts to investigate the incident.
27 Articles
27 Articles
A hacker exploited Ethereum's safe wallet, Safe, to steal digital assets worth 2,900 rsETH (approximately $7.8 million: 1.2 billion yen). However, the hacker's stolen digital assets were then taken over by a bot. Read more...
Yoink MEV Bot Intercepts 2,882 rsETH From Hacker
The reported interception involves rsETH, a liquid restaking token issued by KelpDAO that represents restaked Ether positions. The precise dollar value of the 2,882 rsETH figure depends on rsETH's spot price at the moment of the transaction, which had not been confirmed from a primary source as of this writing.Read more...
A $7.8 million crypto heist was just hijacked by a bot named Yoink | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting
An attacker exploited a Gnosis Safe wallet on Ethereum, removing about 2,900 rsETH, worth roughly $7.8 million, on Tuesday. An automated bot known as “yoink” front-ran the attack transaction and extracted the tokens, security firms BlockSec, Blockaid and SlowMist said. The victim's wallet was set up to let a helper contract move money for it, […] Thank you for subscribing to our RSS feed!
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
