Gnosis Safe Wallet Drained of $7.73 Million
A Gnosis Safe wallet on Ethereum was drained of approximately $7.73 million due to an authorization bypass exploit. The attacker utilized a Router multicall function to execute the theft.
An unidentified user's Gnosis Safe wallet on Ethereum was compromised, resulting in a loss of about $7,730,000. The incident involved an exploitation of an authorization bypass in a Router multicall function, which allowed the attacker to use the victim's Safe module to DelegateCall attacker-crafted data. This manipulation led to the injection of aEthrsETH into a malicious Uniswap V4 hooked pool, followed by a swap and redemption for rsETH.
In response to the incident, Kelp took action by placing a 24-hour pause on an address that received the stolen rsETH. This measure was likely aimed at preventing further movement of the stolen funds. The specific details regarding the addresses involved in the transaction were not disclosed, but the incident highlights vulnerabilities that can exist within smart contract interactions on the Ethereum network.