<\/p>\n
Wasabi Protocol has been hit by a multi-chain exploit worth more than $5 million, according to blockchain security firms. The attack affected Ethereum, Base, Berachain, and Blast.<\/strong><\/p>\n <\/p>\n PeckShield said<\/a> the exploit targeted Wasabi Protocol across several networks. The affected chains included Ethereum, Base, Berachain, and Blast.<\/p>\n Security firms said the attack drained more than $5 million from the DeFi derivatives platform. The incident adds to a sharp rise in DeFi exploits reported this month.<\/p>\n <\/p>\n Blockaid<\/a> and CertiK<\/a> said the attacker used a compromised admin key. The key allowed privileged access through the Wasabi deployer wallet.<\/p>\n The attacker then upgraded core contracts and drained funds. BlockSec said<\/a> early traces show Tornado Cash-funded accounts received admin-linked roles.<\/p>\n Blockaid warned, \u201cAll Wasabi\/Spicy LP-share tokens minted by these vaults should be treated as COMPROMISED.\u201d<\/p>\n Cyvers said the attacker extracted<\/a> several assets, including WETH, PEPE, MOG, USDC, ZYN, REKT, cbBTC, AERO, and VIRTUAL.<\/p>\n The security firm said the stolen funds were consolidated into ETH. They were then bridged to Ethereum and distributed across several addresses.<\/p>\n Wasabi Protocol said it was aware of the issue and was investigating. The team warned<\/a> users not to interact with Wasabi contracts until further notice.<\/p>\n The team said, \u201cAs a precaution, please do not interact with Wasabi contracts until further notice.\u201d<\/p>\n Virtuals Protocol said its security remains intact. However, it froze margin deposits powered by Wasabi Protocol as a precaution.<\/p>\n\n
Compromised admin key linked to attack<\/strong><\/h2>\n
Wasabi tells users to avoid contracts<\/strong><\/h2>\n