MEV Bot Front-Runs $7.8M rsETH Exploit on Ethereum

This is a liquidity and security story, not a DeFi exploit in the usual sense: the value left the protocol through the same kind of ordering race that MEV bots run every day, with the bot simply winning the block. It matters because it shows that rescue and theft are structurally identical when execution is public — the fastest payer, not the intended party, decides where funds land. Whether rsETH holders or the issuer can recover anything from a single address, and whether the original attacker's failure changes the incentive to keep probing, is the open question.