Security· ★★★★· bearish·

Ethereum Safe multisig exploited via Uniswap V4 hook, $7.73M lost

  • Attack on an Ethereum Safe multisig via a public keeper multicall
  • A malicious hook unwrapped aEthrsETH into rsETH
  • The Yoink MEV bot extracted the funds in the same block
  • The loss is estimated at $7.73 million in rsETH
Why it matters: It highlights the vulnerability of Safe modules and Uniswap V4 hooks, as attackers use legitimate mechanisms to steal funds.
Source: PANews