Base vault’s $6M exploit exposes a disclosure gap: Immunefi

A reported $6 million exploit involving a vault on Base has highlighted a disclosure gap in the crypto security ecosystem, according to Immunefi. Crypto News originally reported the development. The available report identifies the incident as a Base vault exploit and attributes the assessment of a disclosure problem to Immunefi.

Base is an Ethereum layer-2 network designed to support lower-cost transactions and decentralized applications. In crypto, vaults generally use smart contracts to hold or manage digital assets, making their security important for users and protocols that rely on automated onchain systems. The report does not provide further details on the vault’s operator, the exploit method, or the assets involved.

Immunefi operates a Web3 security platform that connects projects with researchers through bug-bounty and vulnerability-disclosure programs. Its focus on a disclosure gap points to the broader challenge of ensuring that security findings are reported, assessed and addressed before vulnerabilities can be exploited. Clear reporting channels and coordinated disclosure processes are commonly used across software security to help projects respond to flaws and reduce risks to users.

The incident also underscores the continuing security pressures facing smart-contract applications as activity expands across Ethereum scaling networks. While the reported figure is $6 million, the supplied information does not establish the timeline of the exploit, whether funds were recovered, or what remediation steps may have followed.