Wasabi Protocol Exploited for $5M via Compromised Admin Key Across Multiple Chains

According to PeckShield, Blockaid, and CertiK, decentralized derivatives platform Wasabi Protocol was exploited for more than $5 million in a coordinated attack spanning Ethereum, Base, Berachain, and Blast. The breach was caused by a compromised admin key rather than a smart contract vulnerability. The attacker used the protocol's deployer wallet to upgrade core contracts and drain funds across multiple vaults.

BlockSec reported that accounts funded through Tornado Cash were granted admin-level roles, enabling activity across Wasabi's LongPool, ShortPool, and Vault contracts. Cyvers indicated the attacker extracted WETH, USDC, cbBTC, and memecoins including PEPE and MOG, subsequently consolidating funds into ether, bridging to Ethereum, and distributing across multiple addresses.