Ethereum Wallet Exploit Results in $7.8M Loss Captured by MEV Bot

• •An Ethereum wallet lost approximately $7.8 million in rsETH due to an exploit.
• •An MEV bot named Yoink intercepted the funds before the attacker could finalize the transaction.
• •Kelp DAO has paused rsETH transfers to isolate affected funds while confirming the safety of its core contracts.

On September 15, 2026, an Ethereum wallet lost approximately $7.8 million in rsETH due to an exploit involving a custom Safe module linked to a Uniswap v4 liquidity pool. The attacker manipulated a public keeper multicall to redirect the wallet's module to a malicious pool, allowing unauthorized access to the funds. However, an MEV bot named Yoink front-ran the exploit, capturing the funds before the attacker could finalize the transaction. The incident highlights vulnerabilities in the authorization checks of the executor contract associated with the Safe module. Kelp DAO, the protocol behind rsETH, has temporarily paused transfers to isolate the affected funds, confirming that its core contracts remain secure. No recovery or legal actions have been reported yet, and the incident adds to the ongoing concerns regarding DeFi security in 2026.