# Multicall · Drain Watch

2 incidents, 1 live. JSON: https://drains.watch/t/multicall.json · RSS: https://drains.watch/t/multicall/feed.xml

- [Over-permissioned Safe module abused to drain about $7.8M in rsETH; MEV bot front-runs the thief](https://drains.watch/i/safe-module-authorization-abuse-rseth-sep-2026) (live, Critical, Partly contained, since Sep 15, 2026)
- [Ethereum user loses 999,999 USDT after signing a phishing token approval](https://drains.watch/i/usdt-approval-phishing-999999-jul-2026) (closed, High, Still active, since Jul 8, 2026)