Base Vault Loses More Than $6 Million in Exploit

A multisignature crypto vault on Base lost more than $6 million on Oct. 4, after about 1,783 wstETH left the wallet in a security incident involving assets borrowed from the vault and exchanged through Aave.

The wallet used a Safe configuration requiring three of seven signers to approve transactions. The identities of all seven signers have not been made public.

The attacker borrowed aBaswstETH held by the vault, then exchanged it for wstETH through Aave. The specific authorization weakness that enabled the transactions has not been established.

Base, the Ethereum layer-2 network, and Aave’s core contracts were not identified as having been attacked. The incident centers on the vault and its transaction approvals; no further response or recovery details were provided.