Base Vault Exploit Losses Grow to About $6M, 1,783 wstETH Involved

The whitelist mechanism is the story: an attacker didn't break cryptography, they got a contract added to an approved list, then used the vault's own lending logic to borrow its assets. That points to governance or access control as the weak layer, not the Base chain itself, and it matters for any vault where whitelisting is the gate. Whether the borrowed aBaswstETH is recovered, and whether the whitelist process changes, is the open question.