Squid and Safe Labs say third-party module behind $3.2M exploit
A malicious third-party module exploited Safe wallets, resulting in a $3.2 million theft across Ethereum and Base networks.Summary
An exploit involving a third-party contract labeled "SquidRouterModule" has drained approximately $3.2 million from 86 Safe wallets on the Ethereum and Base networks. While the name caused initial confusion, the cross-chain protocol Squid confirmed that the incident was unrelated to its own core architecture. Security firm Blockaid identified that the vulnerability allowed attackers to impersonate authorized delegates and execute unauthorized token swaps. Safe Labs CEO Rahul Rumalla clarified that the affected wallets were likely managed through external integrations rather than the official Safe Wallet interface, noting that the malicious module was already flagged by "Safe Shield," a security feature designed to detect such risks.
(Source：Cointelegraph)