High Key compromise Source: SlowMist Hacked

Unnamed Safe Multisig (Avalanche Trading Inventory) hacked

A misconfigured 2-of-7 Safe multisig on Avalanche, holding trading inventory, granted unlimited approvals to an address deployable by anyone. An MEV bot front-ran an attacker's attempt, seizing approximately $7.45M in assets. The bot claims to be a whitehat and is negotiating fund return.

Estimated loss
$7,450,000
Protocols
Safe, Unnamed Safe Multisig (Avalanche Trading Inventory)
Chains
Avalanche
Confidence
High
First seen
28 Oct 2026, 03:30 UTC

Read the original report ↗ (opens in a new tab)