Incident Overview
On April 30, 2026, Wasabi Protocol lost $5.5M across Ethereum, Base, Blast, and Berachain when the deployer wallet was compromised and the attacker granted themselves a privileged admin role. The attacker drained funds from EVM deployments while Solana contracts remained unaffected.
The Wasabi Protocol deployer wallet was compromised, giving the attacker access to admin controls. They used this access to grant themselves a privileged role across all EVM chain deployments. With admin permissions, they drained approximately $5.5M in assets from contracts on Ethereum, Base, Blast, and Berachain.
The attack was initially detected at $2.9M but the final tally reached $5.5M as draining continued across all four chains. The funds were distributed to multiple attacker wallets.
Malicious Admin Grant Transaction:
Exploit Transactions:
Ethereum: 0xcd77423f…a70116
Base: 0x10b37160…cb7e40
Blast: 0xaf0f58cb…2850c6
Berachain: 0xf4934fe89ea19a9d5428c64b41319a33804e8158d84c38ad4f6885c270dbf5e
Attacker Wallets:
0xb8Bb8aDD…ca70dB (~$677K)
0x6244117E…3Cf906 (~$1.1M)
Incident Report
Protocol Information
What the Attacker Needed to Succeed
Understanding the prerequisites for this type of attack helps auditors identify protocols that are most at risk and helps developers build better defenses.
What Auditors Should Check
If you're auditing a protocol with similar architecture to Wasabi, these are the critical security checks that could have prevented this incident (April 2026).
- Verify all logic paths related to Access Control are guarded by proper access controls and input validation - see the Access Control Attacks attack class for patterns
- Review privileged functions (owner, admin, governance) for potential abuse vectors - centralization risks should be documented and bounded with timelocks or multi-sigs
Master these auditing techniques with hands-on labs and real exploit scenarios in the Smart Contract Hacking course.
Free TrialSecurity Audit History
- Audit Report 1 Report
Related Attack Classes
The technique used in this hack maps to these vulnerability classes in our security curriculum:
Sources & References
Learn to Prevent the Next Wasabi
The Wasabi hack is one of many attacks that skilled auditors are trained to detect before deployment. Master real exploit patterns and defense techniques with hands-on Web3 security training.