REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #11
HackBase

Impermax V3

November 11, 2025

CAUSE OF DEATH

Zero-rate exploitation in lending protocol allowed unauthorized value extraction.

TOTAL LOST
$380K
CHAIN
Base
TYPE
Hack
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: November 11, 2025. The specimen—Impermax V3 operating on Base chain—was found hemorrhaging liquidity at approximately the time of the reported exploit. Initial discovery suggests attackers identified a critical vulnerability in the protocol's interest rate calculation mechanism and methodically drained $380,000 in user deposits. The patient was pronounced dead on arrival when the exploit went live.

CAUSE OF DEATH ANALYSIS

Cause of death analysis: The autopsy reveals a catastrophic failure in the lending protocol's zero-rate handling. The mechanism responsible for calculating interest—the very economic pressure that should make borrowing costly—was bypassed entirely. Attackers exploited this gap to borrow assets without accruing the debt obligations that should normally accumulate. This represents a fundamental failure of the protocol's economic model: borrowers obtained free capital, converting borrowed funds directly into extracted value. The pathology shows a textbook case of rate manipulation leading to fund exfiltration.

CONTRIBUTING FACTORS

Contributing factors: Examination of the wound suggests this was not a sudden rupture but rather a methodical extraction. No evidence of emergency pause mechanisms engaging suggests either the kill switch was disabled or the exploitation occurred too rapidly for mitigation. The protocol appears to have lacked adequate rate-floor validation, a standard safeguard in mature lending systems. Red flags were likely present in transaction logs weeks or months prior—test transactions, rate queries—but apparently went unmonitored.

VICTIM IMPACT

Victim impact: The deceased had accumulated approximately $380,000 in user-supplied collateral and borrowed funds. These assets were extracted cleanly. Liquidity providers experienced immediate impairment; borrowers faced cascading liquidations as the protocol destabilized. The specimen had been operational on Base, suggesting it was either a nascent deployment (higher risk tolerance) or an established one that had grown complacent about its own mortality.

PATHOLOGIST'S NOTE

Pathologist's note: We find yet another lending protocol that believed economic theory would substitute for actual engineering. The zero-rate exploit is the crypto equivalent of a surgeon believing sterile technique is optional—theoretically unnecessary until someone dies from infection. Impermax V3 discovered that rate mechanisms aren't actually immutable when someone finds the off-switch. File this under 'preventable deaths.' See you at the next autopsy.

"Impermax V3 on Base suffered a $380K exsanguination via zero-rate hack. The lending protocol's interest calculation mechanism failed catastrophically, allowing attackers to drain assets without incurring debt costs. Another DeFi primitive discovers that 'immutable' doesn't mean 'secure.'"

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from DefiLlama