Base Vault Loses About $6M in Aave Deposit Tokens

The whitelist change as the trigger is the detail that matters: it points to a permissions or configuration gap rather than a flaw in Aave itself, which keeps the exposure contained to this vault's depositors rather than the wider lending market. The conversion into wstETH and bridge withdrawals toward Ethereum suggest a deliberate exit path, and the open question is whether the whitelist mechanism was the sole weak point or whether similar vault structures share it.