MEV bot front-runs $7.81M rsETH exploit, leaving Gnosis Safe whale with $7.73M loss

An MEV bot called "yoink" front-ran the exploit in the mempool, capturing the entire ~$7.8M for itself before the original attacker's transaction landed. The attacker had deployed a "Permissionless Attacker Token" to launch the attack. Per the author, the root cause was a whitelisted Safe module acting as strategy executor for whale 0x40E9's leveraged rsETH funds. The module forwarded caller-supplied calldata to execTransactionFromModuleReturnData with DELEGATECALL and no caller gating, letting anyone execute arbitrary code in the Safe's context. The whale reportedly lost $7.73M.

✨ AI summary of the linked source — not editorial content.

Explore the topic

• rsETH
• Safe (Wallet)
• Whale
• Exploit