A Base vault lost roughly $6 million in Aave deposit tokens after an unauthorized whitelist change. The incident highlights ongoing security risks in DeFi and the importance of robust governance protocols.