Blockaid first detected the breach when approximately $2.02M was drained across four transactions. The attack occurred on Base, an Ethereum layer-2 network, and Blockaid noted that the operation was still ongoing during its initial alerts.
Wednesday, October 21, 2026
Story
Attacker Drains $6M in wstETH from Base Vault
Crypto17 days ago
A proxy contract on the Base network was used to extract roughly 1,783 aBaswstETH tokens from an unnamed vault on Oct. 4. The attacker subsequently redeemed these assets through Aave for approximately 1,783 wstETH, valued at $6M, as reported by PeckShield and CertiK. The exploit was enabled after a new contract was added to the vault's whitelist, permitting the attacker to borrow assets and transfer them to a separate controlled address.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.