exploit
Base vault loses 1,783 wstETH ($6M) after multisig signs attacker twice in 90 seconds
An unidentified Base vault's 3-of-7 Safe approved an attacker contract, let it drain 1,783 wstETH via Aave V3, then re-approved it — $31.7M still exposed under the same multisig.