Digital Asset
Intelligence
Security Incident · Avalanche Ecosystem

Unnamed Safe Multisig (Avalanche Trading Inventory) Misconfiguration: $7.45M Reported Loss

·Source-attributed incident record

Incident Overview

A 2-of-7 Safe multisig on Avalanche holding trading inventory had granted unlimited approvals to an address that anyone could deploy code to due to a misconfiguration. An attacker’s attempt was front-run by an MEV bot, which took approximately $7.45M in assets. The bot claims to be a whitehat and is negotiating the return of funds for a 5–10% bounty.

Sources & References

Original incident referencehttps://x.com/DefimonAlerts/status/2115005055619260758 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 1,013,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 64,000
  3. Incident date
    Target

    Seedify

    Attack methodPrivate Key Leakage
    Reported loss$ 1,700,000
  4. Incident date
    Target

    Diamante

    Attack methodPrivate Key Leakage
    Reported lossNot disclosed
  5. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 947,000