Safe Hack

Safe Wallet (formerly Gnosis Safe) on Ethereum was exploited due to an approval-related issue, resulting in a loss of 283,828 $USD from the user's wallet in various tokens.

Between August 12 and August 13, 2023, Safe Wallet, a DeFi wallet on the Ethereum chain, was exploited by three attackers in three separate transactions. The attackers discovered an approval-related flaw that allowed them to steal various tokens including WBTC, PEPE, USDT, WETH, and CRV. The issue appears to be approval-related and the attack vector was the same across the three hacks, but the implementation differed.

The total loss from these exploits amounts to approximately 283,828 $USD.

Attackers:

- https://etherscan.com/address/0xb9c77db3…3ce385

- https://etherscan.com/address/0x38F887a0…f32F70

- https://etherscan.com/address/0x7d9bC45a…d72e26

Malicious Transactions:

- https://etherscan.com/tx/0x31f9d94d…3962b9

- https://etherscan.com/tx/0x5706654a…843eaa

- https://etherscan.com/tx/0x7b675b1d…ad96e0

Malicious Contract Addresses:

- https://etherscan.com/address/0x965a3A60…5c0573

- https://etherscan.com/address/0xA1038f64…686838

- https://etherscan.com/address/0xabB8cDD6…efe680