A vault on the Base blockchain is currently under active attack, with approximately $2.02 million in assets stolen across four transactions. Security firm Blockaid detected the ongoing exploit as the attacker manipulated the vault's whitelist mechanism to gain unauthorized access. The attacker added a newly deployed contract to the vault's whitelist and subsequently borrowed aBaswstETH tokens, transferring them directly to their own contract. The attack remains active as funds continue to be drained from the compromised vault.