MEV Bot Intercepts $7.73 Million Exploit of Safe Wallet on Ethereum

On September 15, 2026, an attacker attempted to drain approximately $7.73 million in rsETH from a Safe wallet on Ethereum by exploiting a flawed authorization check in a custom Multicall contract. A MEV bot named Yoink detected the transaction and front-ran the attacker, successfully securing the assets. Security firms BlockSec, SlowMist, and AstraSec confirmed that the vulnerability resided in a third-party component connected to the wallet, not in the core Safe smart contracts.