A total of 3,047,700 USDC was stolen from a 2/4 Safe multi-signature address, identified as 0xE7c15D929cdf8c283258daeBF04Fb2D9E403d139. The theft occurred in two transactions: 3 million USDC and 47,700 USDC. The funds were misappropriated through a malicious contract address, 0x3Cf6e5A3939F1e9E314f60417CEb9b5e9B66c03F, which closely resembles the legitimate address, 0x3cF63891928B8CeebB81C95426600a18cd59C03f. This exploit was facilitated by the Safe Multi Send mechanism, making it difficult to detect. It is suspected that the victim was targeted by a sophisticated phishing attack, leading to the unauthorized USDC approval to the attacker's contract.