Wasabi Protocol Suffers $4.5 Million Loss Due to Compromised Admin Key

The DeFi sector continues to experience significant losses, with Wasabi Protocol being the latest victim, losing approximately $4.55 million on Thursday due to a compromised deployer key, as reported by security firm Blockaid. The incident occurred on the perpetuals trading platform built on Ethereum and Base, and is the latest in a series of DeFi losses totaling over $605 million across at least 12 incidents this month. The attack bears similarities to the Drift Protocol exploit, where a compromised admin key was used to drain $285 million from the Solana-based perpetuals exchange. The breach was carried out through an externally owned account called wasabideployer.eth, which held the sole ADMIN_ROLE in Wasabi's permission system, allowing the attacker to gain admin privileges and drain the balances by upgrading the perp vaults and Long Pool to malicious implementations. The exploit utilized the Universal Upgradeable Proxy Standard (UUPS), which enables smart contracts to change their underlying code without altering their address, but also poses a risk if an attacker gains admin permissions. Wasabi's lack of timelock or multisig protection for the admin role made it vulnerable to the attack, as it allowed a single key to hold full control over the protocol. Blockaid's exploit detection system identified the ongoing admin-key compromise exploit on Wasabi Protocol, which affected various vaults on Ethereum and Base, including wWETH, sUSDC, and wBITCOIN. Users holding Wasabi LP tokens were advised to revoke any active approvals to the vault contracts, as the underlying assets had either been drained or remained at risk. The incident is part of a larger trend of DeFi exploits, with a cumulative loss of over $770 million across more than 30 reported incidents in 2026, with the majority occurring in April. Other notable breaches this month include CoW Swap, Grinex, Resolv Labs, and Volo Protocol, highlighting the need for improved security measures to prevent such incidents.