Attack on Wasabi Protocol drains $5 million in crypto.

• Wasabi Protocol suffers attack and loses DeFi liquidity.
• Compromised administrative key causes millions in losses.
• Cryptocurrency security is back in focus after attacks.

Wasabi Protocol, a DeFi platform focused on leveraged trading of long-tail assets such as meme coins and NFTs, was the target of a significant attack on Thursday. The vulnerability stemmed from the compromise of an administrative key, allowing the attacker to drain liquidity pools across multiple networks, including Ethereum, Base, Berachain, and Blast.

According to blockchain security companies, the attacker used the protocol's own deployment key to execute a malicious update to the smart contracts. This action resulted in the complete emptying of the vaults linked to the protocol, directly affecting the users who provided liquidity.

Experts warned that all Wasabi LP tokens should be considered worthless following the incident. Furthermore, users were advised to immediately revoke any active permissions related to the protocol's contracts as a preventative measure against further risks.

Initial estimates suggest that losses exceed US$5 million. The impact extends not only to directly affected investors, but also to overall confidence in the DeFi sector, which was already facing pressure following a series of recent incidents.

The Wasabi Protocol team confirmed that they are aware of the incident and stated that they have launched an internal investigation to understand the extent of the attack. Meanwhile, they recommended that users avoid any interaction with their contracts until further updates are released.

This incident occurs at a delicate time for the cryptocurrency market. Throughout April 2026, other significant attacks targeted protocols such as Drift Protocol and KelpDAO, amplifying concerns about structural flaws in the sector. One of the most significant developments was the compromise of the rsETH token, which triggered massive withdrawals of approximately US$10 billion from Aave.

This movement increased volatility in lending markets and put pressure on credit costs within the DeFi ecosystem. In response to the escalating risks, a group of industry participants formed the "DeFi United" coalition, which announced a $240 million rescue package aimed at containing further damage and restoring stability.

The attack on Wasabi Protocol reinforces the importance of security in smart contracts, especially in multichain environments, where vulnerabilities can have widespread and rapid effects.