Gnosis Safe wallet exploited for $7.8 million in rsETH

A Gnosis Safe wallet on Ethereum was compromised on September 15, resulting in the theft of approximately 2,900 rsETH valued at $7.8 million. Security firms BlockSec, Blockaid, and SlowMist identified a vulnerability in the wallet's authorized Multicall contract, which failed to properly verify caller permissions. An attacker exploited this to bypass validation. An automated bot named "yoink" subsequently front-ran the transaction, securing 2,882 rsETH for a fee of $47,000. Kelp DAO, the issuer of rsETH, stated that its contracts remain secure and the asset is fully collateralized, noting that it has implemented a 24-hour pause on the affected addresses.