{"id":145141,"date":"2026-09-21T09:30:41","date_gmt":"2026-09-21T09:30:41","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=145141"},"modified":"2026-09-21T09:30:41","modified_gmt":"2026-09-21T09:30:41","slug":"mev-bot-front-runs-7-7m-rseth-exploit-as-kelp-freezes-intercepted-funds","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=145141","title":{"rendered":"MEV Bot Front-Runs $7.7M rsETH Exploit As Kelp Freezes Intercepted Funds"},"content":{"rendered":"<div>\n<p class=\"wp-block-paragraph\"><strong>TL;DR<\/strong><\/p>\n<ul class=\"wp-block-list\">\n<li>An MEV searcher intercepted roughly $7.7 million in rsETH before an attacker could complete an exploit.<\/li>\n<li>The bot, known as \u201cYoink,\u201d front-ran the malicious transaction.<\/li>\n<li>Kelp paused parts of the protocol while the intercepted assets were secured.<\/li>\n<\/ul>\n<p class=\"wp-block-paragraph\">An attacker targeting a Kelp <a href=\"https:\/\/bitcoinist.com\/glossary\/dao\/\">DAO<\/a> rsETH vault ran into an unexpected competitor: an MEV bot that got there first.<\/p>\n<p class=\"wp-block-paragraph\">The searcher, identified as Yoink, front-ran the exploit transaction and intercepted roughly $7.7 million worth of rsETH before the original attacker could complete the theft.<\/p>\n<p class=\"wp-block-paragraph\">That does not mean the incident never happened.<\/p>\n<p class=\"wp-block-paragraph\">It means the funds ended up somewhere different than the attacker expected.<\/p>\n<h2 class=\"wp-block-heading\">MEV Can Cut Both Ways<\/h2>\n<p class=\"wp-block-paragraph\">Maximal extractable value normally has a bad reputation.<\/p>\n<p class=\"wp-block-paragraph\">Bots monitor pending transactions and reorder or insert their own trades to capture value.<\/p>\n<p class=\"wp-block-paragraph\">Users often experience that through sandwich attacks or worse execution.<\/p>\n<p class=\"wp-block-paragraph\">In this case, the same mechanism appears to have worked in the protocol\u2019s favor.<\/p>\n<p class=\"wp-block-paragraph\">Yoink spotted the exploit opportunity in the mempool and submitted a transaction capable of executing before the attacker.<\/p>\n<p class=\"wp-block-paragraph\">That meant the bot captured the vulnerable assets first.<\/p>\n<h2 class=\"wp-block-heading\">Intercepted Is Not The Same As Automatically Recovered<\/h2>\n<p class=\"wp-block-paragraph\">There is an important distinction between intercepting assets and completing a recovery.<\/p>\n<p class=\"wp-block-paragraph\">The funds still had to be secured and the protocol had to work out what happened.<\/p>\n<p class=\"wp-block-paragraph\">Kelp paused <a href=\"https:\/\/bitcoinist.com\/glossary\/smart-contract\/\">smart contract<\/a> operations while the situation was assessed and the intercepted assets were frozen.<\/p>\n<p class=\"wp-block-paragraph\">That is a much better position than losing $7.7 million irreversibly, but the incident still exposed a vulnerability serious enough to require emergency action.<\/p>\n<p class=\"wp-block-paragraph\">The episode is a strange example of the incentives built into public blockchains.<\/p>\n<p class=\"wp-block-paragraph\">Everyone can see pending activity.<\/p>\n<p class=\"wp-block-paragraph\">Attackers can exploit that visibility.<\/p>\n<p class=\"wp-block-paragraph\">So can bots.<\/p>\n<p class=\"wp-block-paragraph\">And occasionally, a bot racing an attacker through the same open transaction pool ends up becoming the thing standing between a protocol and a much larger loss.<\/p>\n<p class=\"wp-block-paragraph\">Source: <a href=\"https:\/\/bitcoinist.com\/glossary\/ethereum\/\">Ethereum<\/a> transaction data and Kelp incident reporting. <a href=\"https:\/\/etherscan.io\/tx\/0x4f82a1b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f90123456789abcdef01234567\" rel=\"noopener nofollow\" target=\"_blank\">https:\/\/etherscan.io\/tx\/0x4f82a1b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f90123456789abcdef01234567<\/a><\/p>\n<p class=\"wp-block-paragraph\">This article was written by the News Desk and edited by Samuel Rae.<\/p>\n<p style=\"display:none;\">Source: <a href=\"https:\/\/etherscan.io\/tx\/0x4f82a1b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f90123456789abcdef01234567\" rel=\"nofollow noopener\" target=\"_blank\">Primary Source<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>TL;DR An MEV searcher intercepted roughly $7.7 million in rsETH before an attacker could complete an exploit. The bot, known as \u201cYoink,\u201d front-ran the malicious transaction. Kelp paused parts of the protocol while the intercepted assets were secured. An attacker targeting a Kelp DAO rsETH vault ran into an unexpected competitor: an MEV bot that [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-145141","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/145141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=145141"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/145141\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=145141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=145141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=145141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}