Mysterious $6 Million Crypto Vault Drained by Anonymous Seven-Signers

A mysterious $6 million crypto vault on Base, Coinbase's Ethereum layer two protocol, was drained on October 4. Security firms traced about 1,783 wstETH out of the vault, but its owner remains unknown. No protocol claimed the vault, and its apparent controller is a 3-of-7 Safe with seven unidentified signers.

The incident unfolded when Blockaid spotted what looked like an exploit on the vault around 09:21 UTC on October 4. The loss had blown past $6 million just 40 minutes later, with security firms tracing the tokens taken from the vault. A newly created contract was added to the vault's whitelist and borrowed the tokens before redeeming them through Aave for wstETH.

The mystery is harder to ignore due to onchain records pointing to an anonymous seven-signer Safe. The drained vault is an Openzeppelin transparent proxy whose owner points to a Safe created about 324 days ago. That Safe requires three of seven signatures to act, but it carries no public protocol name, and none of its seven signer addresses have been publicly identified by the security firms tracking the incident.