Press Enter to search · ESC to close

Crypto DeFi

Bot Front-Runs Hacker, Steals $7.8M in rsETH From Ethereum Safe

An attacker drained about $7.8 million in rsETH from an Ethereum Safe wallet by exploiting an over-permissioned module. A bot named Yoink then front-ran the payout in the same block, taking the funds before the hacker could move them. The incident highlights the risks of excessive permissions on Safe smart accounts.

Original source

AI take

The notable detail is not the theft but the follow-on: a competing bot captured the same funds in the same block, which suggests the exploit path was visible enough to be monitored and raced. That shifts the practical risk for teams using Safe modules from whether an attacker finds an over-permissioned module to how quickly any drained value becomes contested by third parties. Whether module permissions on smart accounts get tighter, and whether front-running becomes a routine feature of exploit response, is the open question.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback