# Authorization Bypass in a Safe Router Module Drains $7.73 Million of Restaked Ether

A copying bot took the proceeds from the original attacker, in a week that also brought a Bitcoin bridge double-spend and a lending fork that erased debt without burning collateral.

- Published: 2026-09-19T05:45:26.147Z
- Canonical: https://polylog.news/crypto/2026-09-19/authorization-bypass-in-a-safe-router-module-drains-7-73-mil
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/dc3c70555a7c4ee90c01ccb17d3dc3f99e6e48c8), [DeFiHackLabs (Zentra)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/f310fcaafefcc6af92b8a5bc3ca3dc3b569f29c5), [Rekt News](https://www.rekt.news/), [crypto.news](https://crypto.news/fake-ai-trading-bot-tutorials-steal-274-6-eth-from-224-victims/)

A proof of concept published by DeFiHackLabs reconstructs the theft, on 15 September, of more than $7.73 million from a Safe multi-signature wallet holding Aave-wrapped restaked ether. The router module attached to the wallet checked author…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-09-19/authorization-bypass-in-a-safe-router-module-drains-7-73-mil (subscription information: https://polylog.news/pricing).