Wasabi Protocol 4.55M$ Hack: DeFi Crisis Deepens
ETH/USDT
$13,473,665,638.75
$2,285.92 / $2,220.36
Change: $65.56 (2.95%)
+0.0018%
Longs pay
Contents
The DeFi sector can't escape the clutches of hack attacks; Ethereum and Base-based perpetuals trading platform Wasabi Protocol was robbed of $4.55 million on Thursday. The attackers seized the private key of the externally owned account (EOA) named wasabideployer.eth and immediately transferred the single ADMIN_ROLE authority in the protocol's permission system to themselves.
Wasabi Protocol Hack Mechanics: UUPS Exploit
According to Blockaid's detection, this move called the grantRole function and, using the UUPS standard, replaced the codes of the perp vaults and Long Pool with malicious versions. Funds were quickly drained; Ethereum's wWETH, sUSDC, wBITCOIN, wPEPE vaults and Base's sUSDC, wWETH, sBTC, sVIRTUAL, sAERO, and sBRETT vaults were targeted. Users were advised to immediately revoke their LP token approvals. Click for detailed ETH analysis.
Drift Protocol Similarity and New Delisting Developments
The attack mechanics were almost identical to the $285 million loss suffered by Solana-based DRIFT futures platform Drift Protocol at the beginning of the month; there too, North Korea-linked attackers had withdrawn assets in 12 minutes using an admin key without timelock or multisig protection. Wasabi also had a similar weakness: A single deployer key held full control of the protocol.
Breaking news: $DRIFT has been delisted from Upbit and Bithumb exchanges. This delisting triggered a loss of trust after the hack. Coinbase International, on the other hand, brought fresh air to the perps market by listing MegaETH (MEGA) futures.
DeFi Losses and April Crisis
The flexibility offered by UUPS, while giving developers a chance to fix errors, opened the door to codes that steal funds when admin access is abused. Three weeks ago, Kelp DAO lost $292 million due to a single validator vulnerability in the LayerZero bridge. Throughout April, other platforms like CoW Swap, Grinex, Resolv Labs, and Volo Protocol were also shaken by various exploits. Cumulative DeFi losses in 2026 have exceeded $770 million, with April accounting for a large portion of this damage.
ETH Market Reaction and Protection Lessons
ETH is currently at $2,266.90 level, trading sideways with a 24h change of -2.07% (RSI: 49.60). Strong support S1: $2,254 (97/100 score), resistance R1: $2,284 (74/100). Detailed SOL analysis is affected by ETH hacks.
The repeated failures of single-key management are forcing protocol developers to adopt layered protections like multisig and timelock. If the sector does not quickly apply lessons from post-mortem reports of such incidents, trust erosion will accelerate.
