When the Deployer Key Is the Only Admin: How One Compromised Wallet Drained $5M From Wasabi Perp Across Three Chains
Wasabi Perp's admin authority across Ethereum, Base, and Blast was held by a single private key with no timelock, no co-signer, and no execution delay. When that key was compromised, the protocol drained itself through its own privileged functions in two hours.
.png)