Gnosis Safe Wallet Hacked, $7.8M Worth of rsETH Stolen

TechFlow reports that on Sept. 15, according to CoinDesk, a Gnosis Safe wallet on Ethereum was compromised, with approximately 2,900 rsETH (valued at around $7.8 million) transferred. Security firms BlockSec, Blockaid, and SlowMist indicated that the root cause of the attack stems from a flaw in the authorization check of the wallet's authorized Multicall contract—the contract was meant to verify caller permissions, but the vulnerability allowed anyone to pass verification simply by targeting the contract itself.

The attacker then routed the rsETH into a trading pool based on the worthless "Permissionless Attacker Token". An automated bot named "yoink" paid approximately $47,000 to snipe the transaction and transferred 2,882 rsETH to an independent address. rsETH issuer Kelp DAO confirmed its contract is secure and rsETH is fully collateralized, and has imposed a 24-hour pause on related addresses.