Wasabi Protocol: A Spicy $5M Heist Leaves Crypto World in Tears

Ah, the Wasabi Protocol, that fiery concoction of blockchain brilliance, has been served a dish of its own medicine-a multi-chain exploit hotter than a spoonful of the green horseradish itself! Over $5 million, they say, vanished like a ghost at a masquerade, leaving Ethereum, Base, Berachain, and Blast in a state of bewildered despair.

  • Wasabi Protocol, once the darling of DeFi, now lies in ruins, its coffers lighter by over $5 million across the aforementioned chains.
  • Security firms, those modern-day soothsayers, declare a compromised admin key as the culprit-a key so carelessly guarded, it might as well have been left under the doormat!
  • Wasabi, in its infinite wisdom, advises users to steer clear of its contracts, as if one might accidentally stumble into a vault of disappearing funds.

PeckShield, ever the vigilant watchdog, barks that the exploit spanned multiple networks, a heist so audacious it makes the Great Train Robbery look like a petty theft. Ethereum, Base, Berachain, and Blast-all fell victim to this digital Rasputin.

Security firms, with their noses deep in the code, reveal the attack siphoned off more than $5 million from the DeFi derivatives platform. A sharp rise in exploits this month, they say? Why, it’s a veritable carnival of calamity!

The Admin Key: A Tale of Woe and Folly

Blockaid and CertiK, those digital detectives, point their fingers at a compromised admin key-a key that granted the attacker the privileges of a king, all through the Wasabi deployer wallet. Oh, the folly of it all!

With the key in hand, the attacker upgraded core contracts and drained funds with the ease of a pickpocket in a crowded marketplace. BlockSec, ever the sleuth, traces the funds to Tornado Cash-funded accounts, where they were laundered like soiled linen.

Blockaid, in a fit of dramatic flair, warns, “All Wasabi/Spicy LP-share tokens minted by these vaults should be treated as COMPROMISED.” A warning as dire as a prophecy from a Gogol novel!

Cyvers, another player in this tragic comedy, reports the attacker made off with a treasure trove of assets-WETH, PEPE, MOG, USDC, ZYN, REKT, cbBTC, AERO, and VIRTUAL. A veritable smorgasbord of digital riches, consolidated into ETH and bridged to Ethereum, where they were scattered like confetti at a funeral.

Wasabi’s Plea: “Touch Not Our Contracts!”

Wasabi Protocol, in a moment of rare humility, admits to the exploit and promises an investigation. “Do not interact with Wasabi contracts,” they plead, as if the contracts themselves were cursed relics from a forgotten age.

“As a precaution, please do not interact with Wasabi contracts until further notice,” they implore, their digital voice quivering with anxiety. Virtuals Protocol, ever the cautious one, freezes margin deposits powered by Wasabi, a move as prudent as locking the barn after the horse has bolted.

This incident, alas, comes during a month of unparalleled DeFi disasters. Over 25 protocols have lost more than $600 million, with the $292 million Kelp DAO exploit leading the tragic procession. A month so dire, it makes one long for the simplicity of a Gogol short story!

Read More

2026-04-30 14:30