MEV bot front-runs $7.8M rsETH exploit on Ethereum

An Ethereum MEV bot known as Yoink has front-run an attempted Safe wallet exploit involving 2,900 rsETH, worth about $7.8 million, and paid nearly 19 ETH to secure the first position in the block. Summary Yoink received 2,900 rsETH before the original exploit transaction reverted in the same Ethereum block. The bot transferred 2,882.37 rsETH to a separate address and routed 17.63 rsETH through Uniswap v4. BlockSec traced the exploit to weak authorization checks in an executor contract linked to a Safe module. Blockaid said a public keeper multicall let the attacker route funds through a malicious hook pool. Yoink MEV bot takes the first position PeckShield identified the incident as an approximately $7.81 million attack involving rsETH, a liquid restaking token associated with KelpDAO, after an MEV bot placed its transaction ahead of the suspected attacker. On-chain records cited by security researchers show that Yoink received 2,900 rsETH in Ethereum block 25980525. From the total, the transaction sent 2,882.37 rsETH to the address 0xC70f00CD7E461686b04B0E912E309becA8b80ea0. At the time the address was reviewed, its balance stood at 2,882.36740883 rsETH. No transfer from the addre...