Ethereum rsETH Exploit Causes $7.73M Loss in Uniswap v4 Module

An unidentified Safe wallet user has lost roughly $7.73 million worth of rsETH in an Ethereum rsETH exploit that exposed a weak point inside one of Uniswap’s newest liquidity tools. The loss was flagged by blockchain security firm Blockaid, which traced the attack to a custom module built for Uniswap version 4, one of decentralized finance’s most closely watched protocols.

Key takeaways

• A Safe wallet user lost about $7.73 million worth of rsETH in the exploit, according to Blockaid.
• The attacker used a public keeper multicall function to target a custom Uniswap v4 liquidity provider module.
• Stolen funds were routed into an attacker-created hooked pool.
• The attack specifically hit Uniswap version 4’s liquidity provider architecture.

Massive $7.73 Million rsETH Loss from Ethereum Exploit

The victim’s identity has not been disclosed, but the scale of the loss is not in question. Blockaid reported that the Safe wallet holder saw about $7.73 million in rsETH drained through the exploit, marking one of the more significant single-wallet losses tied to Uniswap v4 infrastructure since the protocol’s rollout.

Affected User and Asset

rsETH, a liquid staking token, was the asset targeted in the breach. Liquid staking derivatives like rsETH are frequently used across DeFi as collateral or trading pairs, which makes them an attractive target when a vulnerability opens up inside a liquidity module that handles them.