Roughly $3 million was drained from 86 Gnosis Safe wallets on Ethereum and Base in just 2 hours after attackers targeted the SquidRouterModule. Rather than compromising wallets one by one, the exploit hit a shared routing module many Safes relied on for cross-chain activity, turning that common dependency into a single attack path across dozens of wallets.
Blockaid’s monitoring indicates the attacker abused that module, then funneled the stolen assets through attacker-controlled Uniswap V3 pools and swapped almost everything into DAI to consolidate the proceeds.