Base DeFi Vault Hit for $6 Million in Ongoing Exploit

A DeFi vault on Base has suffered a significant loss due to an ongoing exploit. The attacker managed to extract assets worth more than $6 million by adding a new contract to the vault's whitelist. Blockaid initially estimated the losses at $2.02 million across four transactions.

Security researchers later linked about 1,783 wstETH to a suspected attacker address. The available evidence does not indicate that Aave's core lending contracts or Base itself were compromised.

The exploit highlights weaknesses in whitelist controls across decentralized finance infrastructure. The investigation is ongoing, and no further details are available at this time.