MEV Bot Yoink Front-Runs Hacker to Intercept 2,882 rsETH

An attacker attempted to drain approximately 2,900 rsETH (worth about $7.8 million) by exploiting a vulnerability in a Multicall contract authorized by a Safe multi-sig wallet. An MEV bot named yoink detected the transaction in the public mempool and front-ran it by paying a $47,000 fee, successfully intercepting 2,882 rsETH. Security firms confirmed the flaw originated from user-authorized components rather than the core Safe contract. Kelp DAO has suspended the receiving address for 24 hours.