Ethereum Wallet Drained of $7.8 Million in Custom Module Exploit

An Ethereum user suffered a significant loss after an attacker drained $7.8 million from a wallet on September 15, 2026. The incident targeted a custom Safe module connected to a Uniswap v4 liquidity pool rather than the Kelp DAO protocol itself.

Security experts confirmed that the core rsETH smart contracts remain safe and were not the cause of the vulnerability. The attacker focused their efforts on the specific configuration used for the liquidity pool interaction instead.

This incident highlights the hidden dangers of using custom code modules with decentralized finance platforms. Traders should remain cautious when connecting their wallets to complex liquidity setups, as custom integrations often introduce risks that standard protocols do not face.

Moving forward, analysts are keeping a close eye on the affected wallet addresses to track where the stolen funds are moving. Users should review their connected Safe modules to ensure their security settings are up to date.