$7.73M Stolen via Malicious Uniswap v4 Hook Route Attack on Safe Wallet

A malicious Uniswap v4 hook route was used to steal approximately $7.73 million from a Safe wallet on September 15 at 04:38:47 UTC.

The attack involved a public keeper multicall and an authorised custom Uniswap v4 LP Safe module being routed into an attacker-created hooked pool, which converted the stolen assets into transferable rsETH.

According to Blockaid, the incident was attributed to unsafe delegated-module authorization rather than a compromise of Safe's core contracts or wallet owner keys.