Hack history / 2026 / Hack or exploit
RsETHSafeModule
Hack or exploit on Sep 15, 2026 · Smart Contract Vulnerability
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$7.7M
dollars at the time
Returned
none listed
as the sources state it
Rank
#361
among thefts by dollars lost
What happened
An unidentified user’s Gnosis Safe wallet on Ethereum was drained of about $7,730,000. The attacker exploited an authorization bypass in a Router multicall function, used the victim Safe module to DelegateCall attacker-crafted data, injected aEthrsETH into a malicious Uniswap V4 hooked pool, then swapped and redeemed it as rsETH. Kelp later placed a 24-hour pause on an address that received the stolen rsETH.
Details
- Date
- Sep 15, 2026
- Kind
- Hack or exploit
- Method
- Smart Contract Vulnerability
- How in
- Smart contract bug
- Target
- Wallet
- Chains
- not stated
Reported by
Related incidents
Third-party Gnosis Safe Module (SquidRouterModule) 2026 · Hack or exploit · $3.2M
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
CashCowCoin 2026 · Hack or exploit · $117K
Haedal Vault 2026 · Hack or exploit · $915K
NEM（NemTokenV2） 2026 · Hack or exploit · $822K
Butter Bridge 2026 · Hack or exploit · $180K
CashCowCoin 2026 · Hack or exploit · $117K
Cite this page
SwanBluechip, "RsETHSafeModule hack, Sep 15, 2026: $7.7M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht3513ab02a4/ (data as of 2026-10-31).