$4M Exploit of a Third-Party Safe Module Called “SquidRouterModule”: What Exactly Happened
TL;DR
On May 25, 2026, an exploit targeted a third-party Safe module deployed at the same address on Ethereum, Base, and Arbitrum: 0x1f1d37a3Bf840e35c6a860c7C2dA71Fe555123ca.
The observed victims were