According to Blockaid, the Wasabi deployer EOA was used to grant an attacker-controlled helper contract admin access. The attacker then upgraded the protocol’s UUPS contracts, including the perp vaults, to a malicious implementation.

Wasabi is a platform for leveraged trading using pooled on-chain liquidity. It allows users to borrow funds from shared vaults to amplify exposure, similar to perpetual-style trading.