Kelp DAO Wallet Hit with $7.8 Million rsETH Exploit

An Ethereum wallet lost around $7.8 million due to an rsETH exploit on September 15, 2026. The attack was traced back to a custom Uniswap v4 liquidity pool Safe module linked to a Kelp DAO wallet.

The security firm Blockaid detected the exploit and identified it as a public keeper multicall function that redirected the wallet's custom module toward a malicious Hook pool.

The attacker successfully extracted the tokens through the malicious pool, but an MEV bot called 'yoink' intervened and captured the stolen funds for itself.

Kelp DAO has responded by temporarily pausing rsETH transfers for 24 hours to isolate the affected funds.