BREAKING: Wasabi Protocol EVM HACK – $4.5M Lost in Massive Security Breach!

Wasabi Protocol Update: EVM Breach Triggers Lockdown and Probe

Show AI Summary
A security incident occurred on April 30, 2026, hitting Wasabi Protocol’s EVM systems, resulting in a $4.5 million loss.
The protocol quickly contained the situation, blocked entry points, and secured affected systems to prevent further damage.
Following the incident, Wasabi Protocol rotated credentials, brought in external security firms, and issued new withdrawal guidance to mitigate user impact.

On April 30, 2026, Wasabi Protocol experienced a security breach that resulted in approximately $4.5 million in losses across its Ethereum-based systems. The team responded by temporarily shutting down access to the affected areas. They confirmed that the Solana version of the protocol and its Prop AMM were not affected, and that the situation is now under control while they investigate how the attackers gained access.

The team posted on X to advise users to stay away from any vaults or accounts that may have been hacked. They stated they acted quickly to stop the attack by blocking the way hackers were getting in and making the systems safe.

— Wasabi Protocol 🟢 (@wasabi_protocol) May 1, 2026

As a crypto investor, I was relieved to hear that after the recent security incident, the Wasabi team immediately rotated all their system credentials and keys. They’ve also brought in outside security experts to help with the investigation. While they’re being careful not to share too many technical details right now while things are still being reviewed, they did say they contacted the wallet address associated with the affected funds, hoping to resolve the issue privately.

Security response and user impact

Wasabi Protocol recently provided users with updated instructions on how to withdraw their funds. They clarified that withdrawals were possible from vaults that hadn’t been compromised, but cautioned against interacting with any contracts that had been exposed. The protocol published a list of affected vaults on several blockchains – including Mainnet, Base, Blast, and Berachain – specifying assets like sUSDC, sWETH, sBITCOIN, and various synthetic tokens.

After the update, users started checking their accounts for potential problems and removing permissions they had granted to the system. This is a standard practice to limit damage after a security issue. The system also confirmed that unaffected accounts are still safe to use and withdraw funds from.

Broader DeFi security pressure builds

This attack is part of a growing trend of problems in decentralized finance (DeFi) caused by weaknesses in how access is managed. Hackers have repeatedly gotten around security measures by gaining control of administrator accounts, forcing DeFi projects to improve their security practices.

As a crypto investor, I was really disappointed to see what happened with Step Finance. They were hit by a major attack where over 261,000 SOL – worth over $28 million back then – was stolen. I watched the on-chain data and saw funds being quickly moved out of their wallets right after the hack. Sadly, despite their best efforts to recover or find a buyer, they just announced they’re shutting down for good. It’s a tough loss for everyone involved.

Drift Protocol also suffered a major hack, losing around $285 million. Attackers used a clever combination of social engineering and exploited a weakness in the system’s governance. Records on the blockchain show the stolen funds were initially swapped for other cryptocurrencies and then moved to the Ethereum blockchain. This reduced the total amount held in Drift Protocol’s vaults from $309 million to just $41 million.

As an analyst, I’m seeing ongoing vulnerabilities in how DeFi protocols manage access, which is concerning. The good news is that protocols that have weathered attacks are now prioritizing better monitoring and strengthening their multi-signature security systems to prevent future issues.

Read More

2026-05-04 10:12