Base DeFi vault loses over $6 million in exploit

An unnamed DeFi vault operating on the Base network has lost over $6 million following a security exploit. The attacker reportedly gained access by adding a new contract to the vault’s whitelist, which was then used to borrow aBaswstETH and transfer aTokens to an attacker-controlled address.

Security firms Blockaid and Spot On Chain tracked the incident, with the latter estimating the loss at approximately 1,783 wstETH. While the exploit resulted in significant asset drainage, there is currently no evidence suggesting that Aave or the Base core systems were breached.