Yoink Bot Foils $7.7M rsETH Exploit on Kelp DAO

An attempt to exploit the custom Uniswap v4 liquidity module tied to a Safe wallet by an attacker was thwarted when an MEV bot named Yoink front-ran the transaction and intercepted approximately $7.7 million worth of rsETH.

The incident unfolded this month, with the attacker attempting to drain roughly $7.7 million in rsETH through the module. However, the MEV bot Yoink spotted the exploit attempt in the mempool and submitted its own transaction capable of executing first.

Kelp, the protocol behind rsETH, placed the address that received the intercepted funds under a 24-hour precautionary pause to prevent further movement of the tokens. In a public statement, Kelp described the move as 'a precautionary, wallet-level measure only,' emphasizing that its own smart contracts were unaffected and rsETH remained fully backed.