EN ▼
Favorites
My Favorites
View All
Market Cap Price 24h%

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

MEV robot blocks $7.7 million vulnerability attack on Ethereum Safe Wallet, rsETH funds suspended

2026-09-16 03:14:35
Bookmark

MEV机器人拦截以太坊Safe钱包770万美元攻击,rsETH资金暂停

一名攻击者试图利用与Ethereum Safe钱包关联的自定义模块,窃取约770万美元的rsETH。然而,在原始漏洞利用完成之前,一个自动化的MEV(最大可提取价值)机器人介入并截获了大部分资金。

对Safe钱包的攻击及干预措施

区块链安全公司Blockaid报告称,此次漏洞利用始于攻击者利用公共 keeper 的多调用功能,将自定义Uniswap v4流动性模块路由到一个特殊构建的池子中,即所谓的“挂钩池”(hooked pool)。通过这一过程,aEthrsETH被解包并转换为基于以太坊的合成代币rsETH。

目标钱包被确定为与未识别用户关联的Safe钱包。Blockaid表示,在发现时,损失金额约为773万美元的rsETH。

当攻击者试图提取rsETH时,一个名为Yoink的知名MEV机器人监控并拦截了该交易。MEV机器人通常会扫描区块链活动,通过抢先交易(front-running)其他参与者的交易来捕捉有价值的机会,从而获利。

区块链数据显示,Yoink在exploiter之前成功获得了rsETH,并在同一笔交易中向一个被认定为区块构建者的地址转移了18.93 ETH(约合46,000美元)。

Kelp的回应及持续调查

负责发行rsETH的以太坊协议Kelp对此事件作出回应,对接收被盗代币的钱包实施了24小时的转账暂停。此举被描述为一种临时性的钱包级别安全措施,以防止代币进一步流动。

Kelp声明,其协议合约保持安全,且“rsETH仍有全额储备支持”。尽管涉事钱包被暂停交易,但Kelp确认铸造、提现及其他集成服务仍照常进行。该协议表示正在与安全专家合作,以审查漏洞利用的细节。据Kelp称,仅受害者Safe钱包所附加的自定义模块遭到利用,核心Kelp合约未受影响。

持续监控及后续步骤

调查仍在进行中,团队致力于确定完整的影响范围,并确保协议内用户资金的持续安全。截至发稿时,Blockaid和Kep尚未提供进一步的评论。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article
More News
TOP

TOP