Safe 3-of-5 multisig

Overnight threat

/ 100

ELEVATED

0x05CEa6C36f3a44944A4F4bA39B1820677AcB97EE0x05CE…97EEexplorer ↗block #55,234,107 ↗2026-11-09 15:13 UTCscanned in 3,068 ms2 findings

Share card

Share threat card

SHARE ON X SHARE ON FARCASTER

Morning desk brief · RULE-BASED · LIVE FACTS

block #55,234,107 ↗

ELEVATED · 40/100 — Safe 3-of-5 multisig 0x05CE…97EE on Base at block #55,234,107.

Act first: 4 unlimited approvals. Approval coverage: 37 tokens × 51 spenders + 185 Permit2 sub-allowances; Approval logs over 24h for curated tokens + Permit2 only. Panic Bunker can revoke the 4 flagged approvals as one Safe transaction (3-of-5 signatures).

Findings · 2

points add up to the score

Severity	Finding	Points
CRIT	4 unlimited approvals WETH → Permit2 (Universal) · WETH → CoW Protocol GPv2VaultRelayer · USDC → Uniswap v3 Position Manager · AERO → CoW Protocol GPv2VaultRelayer	+40
INFO	Safe 3-of-5 multisig Smart-contract wallet (Safe v1.3.0): revocations execute as one Safe transaction once 3 owners sign. Safe ↗	+0
Total	40

CRIT

4 unlimited approvals

WETH → Permit2 (Universal) · WETH → CoW Protocol GPv2VaultRelayer · USDC → Uniswap v3 Position Manager · AERO → CoW Protocol GPv2VaultRelayer

+40

INFO

Safe 3-of-5 multisig

Smart-contract wallet (Safe v1.3.0): revocations execute as one Safe transaction once 3 owners sign.

Safe ↗

Total

Wallet exposure · Safe 3-of-5 multisig

OPEN PANIC BUNKER

Native ETH: 0
Live approvals: 4
Spenders checked: 510 Approval logs in 8h
Approval coverage: 37 tokens × 51 spenders2072 allowance reads · 24h log window

Holdings

USDC: 22,569.0582

Open approvals

Token	Spender	Allowance
WETH	Permit2 (Universal) 0x0000…8BA3 ↗	UNLIMITED
WETH	CoW Protocol GPv2VaultRelayer 0xC92E…0110 ↗	UNLIMITED
USDC	Uniswap v3 Position Manager 0x03a5…34f1 ↗	UNLIMITED
AERO	CoW Protocol GPv2VaultRelayer 0xC92E…0110 ↗	UNLIMITED

Base public RPC requires an address filter for logs, so Approval-log discovery covers the curated tokens + Permit2 (set BASE_LOGS_RPC_URL for wallet-wide discovery).