MEV Bot Yoink Secures 2882 rsETH Before Attackers Could

An attempted theft of approximately 2,900 rsETH (worth about $7.8 million) was thwarted when MEV bot Yoink secured 2,882 tokens first by paying around $47,000 in fees to process the transaction ahead of attackers. The attack targeted a Multicall contract with an authorization flaw approved by a Safe multisig wallet, according to reports. Coindesk noted that once the malicious transaction appeared in the public memepool, Yoink paid the fee and moved the tokens to another address. BlockSec, Blockaid, SlowMist, and AstraSec clarified that the vulnerability was not in Safe's core contract but in helper components and Multicall configurations approved by the wallet user. Kelp DAO, rsETH's issuer, has temporarily frozen the receiving address for 24 hours.