Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingCrypto market turmoil over the weekend: Base Chain Vault protocol was hit by a major hack
The cryptocurrency market was not calm this weekend. On-chain data analysts and security researchers have discovered a serious security breach in a Vault protocol operating on the Base network. In the attack, approximately $6 million worth of digital assets were cleared within minutes.
How are hacking attacks implemented? What methods were used?
The first investigation by security experts showed the attack was carefully planned. A total of 1,783.067 aBaswstETH was withdrawn through six transactions from an undisclosed Vault address. The steps and technical details taken by the attacker are summarized as follows:
- Authorized abuse: The system's recently added whitelisted smart contracts exploit Vault's lending mechanism to conduct malicious operations.
- Asset conversion: The extracted aToken was quickly redeemed and converted into approximately 1,783 wstETH.
- Fund flow: Funds are transferred from the Vault to the attacker's smart contract, then to the personal wallet, and finally completed in the form of wstETH.
PeckShield's statement and attacker's address
PeckShield, a leading blockchain security company, confirmed unusual activity on the network in real time. The announcement pointed out that the wallet with the address 0x0B5126... B034 transferred 1,783 wstETH on the Base network, and the address has been directly included in the suspicious list.
In the initial test transaction, only 1 aBaswstETH was extracted; as the vulnerability was confirmed, five more large withdrawals were subsequently made. Currently, the source of the authorization loophole and the official identity of the target agreement are still under investigation.
Smart Contract Risk and Market Analysis
Such security flaws in the decentralized finance (DeFi) ecosystem once again highlight the importance of protocol-based risks. In particular, the newly added smart contracts and lending mechanisms may pose security risks to the entire ecosystem if they are not fully audited.
Investors should carefully review smart contract audit reports when managing portfolios on different networks or joining liquidity pools. This incident shows that in the process of cryptocurrency investment, agreement risk is as critical as price fluctuations.
By tracking these dynamics and security analyses regularly, you can plan your investments more securely. Please note that this content does not constitute any investment advice. The market has high-risk characteristics, please conduct independent research before making an investment decision.
