The Base vault attack involved a newly deployed contract gaining whitelist access, borrowing against the vault’s Aave V3 position, and moving the assets to an attacker-controlled address.

verified span

“Blockchain security firms said a newly deployed contract gained whitelist access to the vault and borrowed against its position on Aave V3 before the assets were moved to an attacker-controlled address.”