Base Vault Loses $6M; the Owner Column Stays Blank
CertiK traced 1,783 wstETH through Aave to one address. No protocol has claimed the vault.
An unnamed vault on Base lost about 1,783 wstETH, worth roughly $6 million, on October 4, 2026[1]. CertiK traced the coins through Aave into about 1,783 wstETH at the attacker’s address[2]. One address holds the whole stack.
No protocol has claimed the vault or put out a post-mortem[3]. The funds are not frozen, and no bounty or plan to get the money back has been announced[3].
What to do: no action needed — nothing is named to revoke[3].
Who gains, who loses
Receipts
A Base vault lost approximately 1,783 wstETH, worth roughly $6 million, on October 4, 2026.
“An unidentified vault on Base, the Ethereum layer-2 (L2) network incubated by Coinbase, lost about 1,783 wrapped staked Ether (wstETH), worth roughly $6 million, on Sunday, October 4, 2026.”
The Base vault's stolen wstETH was redeemed through Aave into approximately 1,783 wstETH held at the attacker's address.
“CertiK said the tokens were redeemed through Aave into roughly 1,783 wstETH held at the attacker’s address.”
As of October 4, 2026, no protocol had claimed the Base vault, issued a post-mortem, frozen the funds, or announced a recovery effort or bounty offer.
“As of publication, no protocol has claimed the vault, issued a post-mortem, frozen funds or announced a recovery effort or bounty offer.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.