$6M Vanishes From Base Vault Controlled by 7 Mystery Signers

Vault Drained on Base

On Oct. 4 a $6 million crypto vault on the Base network was drained, according to security firms. The loss consisted of roughly 1,783 wstETH tokens that were traced on‑chain to an anonymous seven‑signer Safe wallet.

The identity of the vault’s owners remains unknown. No public information has linked the Safe to any known entity, and the incident has been labeled a “mystery” by observers.

Investigators confirmed that Base itself was not compromised and that Aave’s core contracts were not implicated in the breach. The theft appears to have resulted from a compromise of the multi‑sig configuration rather than a network‑level exploit.

Implications for Multi‑Sig Security

A seven‑signer Safe is a common multi‑sig solution used for treasury management, requiring multiple approvals before transactions can execute. The case underscores the risks when signer identities are undisclosed and any single key is exposed.

The investigation has not yet identified the compromised signer, and authorities are still working to trace the full flow of the stolen assets. Security best practices now emphasize transparent ownership structures and regular key rotation.

So far, no immediate impact on ETH or other major assets has been observed, suggesting the breach was isolated to the vault. The incident highlights the importance of on‑chain tracing tools, which enabled investigators to follow the wstETH through the blockchain.

Source: Bitcoin.com News