High risk — April 2026 admin key exploit revealed critical governance architecture failures (single EOA, zero timelock); LP vaults remain exposed to extreme directional risk on long-tail assets.
Risk Breakdown
Top Risks
Admin key compromise — April 30, 2026 exploit drained $4.5-5.5M across Ethereum, Base, Blast, and Berachain via a single EOA admin key with zero-delay timelock enabling instant UUPS proxy upgrades on all vault contracts.
Asset-backed perps on long-tail assets — Wasabi enables leveraged trading on memecoins and NFTs, assets with extreme volatility and thin liquidity.
LP vault as counterparty — ETH-ERC20 LP vaults act as counterparty to all trades. In trending markets for volatile assets, LPs can face significant losses.
Insurance fund adequacy — may be insufficient for tail-risk events common in memecoin and NFT markets.
Frequently Asked Questions
Is Wasabi safe to use?
What are the main risks of using Wasabi?
What is Wasabi's risk score breakdown?
How does Wasabi compare to other Derivatives protocols?
Has Wasabi ever been hacked or exploited?
Incident History
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.