TREE NEWS update: An attacker drained about $7.8 million in rsETH from an Ethereum Safe wallet by exploiting an over-permissioned module. A bot named Yoink then front-ran the payout in the same block, taking the funds before the hacker could move them. The incident highlights the risks of excessive permissions on Safe smart accounts.
Bot Front-Runs Hacker, Steals $7.8M in rsETH From Ethereum Safe
The notable detail is not the theft but the follow-on: a competing bot captured the same funds in the same block, which suggests the exploit path was visible enough to be monitored and raced. That shifts the practical risk for teams using Safe modules from whether an attacker finds an over-permissioned module to how quickly any drained value becomes contested by third parties. Whether module permissions on smart accounts get tighter, and whether front-running becomes a routine feature of exploit response, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.