Seamless

Penpie

DeFi

Euler

Base

BaseBros Fi, a yield optimization decentralized finance (DeFi) protocol on Base blockchain, disappeared from the internet after stealing its users’ investments through an unaudited smart contract.&nbsp;
On Sept. 13, BaseBros deleted its official website and social media accounts on X and Telegram. Blockchain security firm Chain Audits, who had previously audited some BaseBros smart contracts, found that the DeFi project orchestrated a rug pull via “an unaudited and unverified Vault contract.” 
<figure>
 <img alt="Base DeFi project disappears after rug pull" name="" src="https://s3.cointelegraph.com/uploads/2024-09/0191f9b6-4d52-7bb8-bca5-91ac7edc4ecb">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/BaseBrosFi" rel="null" target="null" text="null" title="https://x.com/BaseBrosFi">BaseBrosFi</a>
 </figcaption>
</figure>
BaseBros had approximately 2,000 followers on X and over 3,300 members on Telegram right before its disappearance.&nbsp;
<h2 id="vulnerable-smart-contract-went-audited">Vulnerable smart contract went audited</h2>
ChainAudits <a data-ct-non-breakable="null" href="https://github.com/ChainAudits/Projects/blob/main/2024/BaseBrosFi/ChainAudits_PostMortem_BaseBros_Rug_Post_Mortem.pdf" rel="null" target="null" text="null" title="null">claimed</a> it had audited four of the five smart contracts used in the BaseBros project and added:
<blockquote>
 “Unfortunately the contract that facilitated the rug pull (Vault Contract) was not included in our audit scope, nor is verified on the blockchain.”
</blockquote>
The unaudited contract contained a backdoor vulnerability, allowing the company owners to withdraw funds deposited into the “Strategy” contract.&nbsp;
<figure>
 <img alt="Base DeFi project disappears after rug pull" name="" src="https://s3.cointelegraph.com/uploads/2024-09/0191f9b6-c083-7aaa-9654-c1a68351cd9e">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/ChainAudits_io/status/1834920031739682904" rel="null" target="null" text="null" title="https://x.com/ChainAudits_io/status/1834920031739682904">Chain Audits</a>
 </figcaption>
</figure>
<h2 id="basebros-rug-pull-had-no-impact-on-the-seamless-protocol">BaseBros rug pull had no impact on the Seamless protocol</h2>
The rug pull event was initially wrongly assumed to impact the Seamless protocol due to similar contract labeling. According to blockchain investigator Cyvers, the bad actor siphoned $130,000 worth of stolen funds through the crypto mixing service Tornado Cash.
<figure>
 <img alt="Base DeFi project disappears after rug pull" name="" src="https://s3.cointelegraph.com/uploads/2024-09/0191f9b7-0812-7ee1-81db-0767a65e57b1">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/CyversAlerts/status/1834644293757329522" rel="null" target="null" text="null" title="https://x.com/CyversAlerts/status/1834644293757329522">Cyvers</a>
 </figcaption>
</figure>
Seamless conducted an internal investigation and declared the protocol and its investors’ funds safe from any attacks. Chain Audits also confirmed that BaseBro Fi was the only protocol affected that lost funds from multiple pools.&nbsp;
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/indodax-crypto-exchange-hacked-22-million-loss" rel="null" target="null" text="null" title="null">Indonesian crypto exchange Indodax goes offline after suspected $22M hack</a>
Recently, a seasoned hacker appreciated the attacker responsible for <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/penpie-protocol-exploited-suffers-27-million-loss" rel="null" target="null" text="null" title="null">DeFi protocol Penpie’s $27 million hack</a>.
The Penpie hacker received an onchain appreciation message from the Euler Finance hacker, who had <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/euler-finance-hacked-for-over-195m-in-a-flash-loan-attack" rel="null" target="null" text="null" title="null">stolen $195 million in March 2023</a>.&nbsp;
<blockquote>
 “Good job bro. I didn’t see a hack like this for a while. I’m happy you kept all the money and didn’t let these bastards get back one dollar of what you took. You won, they lost. Good job.”
</blockquote>
However, the Euler Finance hacker had returned 90% of the stolen funds in return for legal immunity and a 10% reward.&nbsp;
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/simple-change-save-ethereum-roadmap-to-hell/" rel="null" target="null" text="null" title="null">Proposed change could save Ethereum from L2 ‘roadmap to hell’</a>

Base DeFi project disappears after rug pull

Table of Contents

Cointelegraph

Other articles published on Sep 16, 2024

Norwegian Town Faces Price Surge After Bitcoin Mine Shutdown, Residents Hit with Higher Bills

Coinbase Denies Preferential Bitcoin Borrowing Privileges to BlackRock Amid Accusations

Bitstamp to Launch Crypto Derivatives Exchange with Ripple Partnership, Could This Trigger XRP’s ...

Flare introduces FTSOv2 to boost decentralized data security

PancakeSwap Launches AI-Powered Prediction Bot on Telegram

Circle and Sony Block Solutions Labs Partner to Boost USDC Adoption on Soneium

Join our free newsletter for daily crypto updates!