Wasabi Protocol has disclosed a security breach where attackers exploited a vulnerability in its AWS infrastructure to gain access to private keys controlling smart contracts. This breach, occurring on April 30, resulted in the theft of $4.8 million in user funds and $900,000 from the project's treasury from EVM contracts. Affected vaults were on Ethereum, Base, Blast, and Berachain, while Solana deployments and Prop AMM remained unaffected. Wasabi has stated that the vulnerability has been contained, and unaffected vaults resumed withdrawals on May 2. The protocol has engaged ZeroShadow to track the stolen funds. While Wasabi is exploring all possible avenues for compensating affected users, no definitive compensation plan has been announced yet.