MakerDAO ETH-A Liquidation Keeper Bot

A dormant third-party MakerDAO ETH-A liquidation keeper had an unprotected drain routine that lacked ds-auth authorization. Any caller could invoke the function and provide the withdrawal recipient.

exit() to send it to an attacker-controlled recipient and unwrap it to ETH. MakerDAO’s core contracts behaved as designed; the vulnerability was in the third-party keeper.