Blockaid said it detected an attack on Ethereum targeting a Safe multisig wallet belonging to an unidentified user. According to the monitoring firm, the attacker used a public keeper multicall to introduce a custom Uni V4 LP Safe module into a hook-enabled liquidity pool that the attacker had created. The hook then unpacked aEthrsETH into rsETH, after which Yoink MEV extracted the funds within the same block.
Blockaid said two transactions have so far been confirmed in connection with the incident. The confirmed loss stands at about $7.73 million in rsETH. No further details about the wallet owner were disclosed in the source material. The report identifies the sequence of contracts and on-chain actions involved in the exploit, including the use of the public keeper multicall, the custom Safe module, the hook-enabled pool, the conversion from aEthrsETH to rsETH, and the block-level extraction by Yoink MEV.
Blockaid said it detected an attack on Ethereum targeting a Safe multisig wallet tied to an unidentified user.
The attacker used a public keeper multicall to introduce a custom Uni V4 LP Safe module into a hook-enabled pool created by the attacker. The hook then unpacked aEthrsETH into rsETH, and Yoink MEV extracted the funds within the block.
So far, two transactions have been confirmed to have caused about $7.73 million in rsETH losses.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
