Grand Base Hack

Reported loss $1.7M
Base
Unauthorized token minting and liquidity-pool dump after privileged-wallet compromise

What happened

Grand Base on Base lost roughly $1.7 to $2 million after a reported deployer-wallet compromise gave an actor token mint authority and liquidity-pool control. The actor minted GB, sold it into liquidity, and bridged proceeds to Ethereum.

Technical root cause

A deployer or LP-control wallet retained privileged token minting and liquidity authority. Its reported compromise allowed unauthorized token issuance and immediate sale into protocol liquidity.

How it happened

An actor with deployer-wallet authority minted approximately 32.5 million GB and sold the newly minted tokens into the liquidity pool. The proceeds were moved from Base toward Ethereum. Grand Base warned users to stop interacting, asked liquidity providers to remove funds, and said it was coordinating with exchanges on potential freezes.

The incident was an administrative-control compromise and token mint-and-dump, not a smart-contract logic exploit or a flash-loan attack.

Protocol details

Classification Access control / compromised deployer wallet
Protocol Type Exploit/Access control
Affected asset / contract GB
Implementation language Solidity
Protocol links Website @grandbase_fi

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.