What should Wasabi users do right now?

[cryptobro]

Wasabi Protocol has urged all users to stop interacting with any Wasabi contracts until further notice while the investigation remains active. The deployer key remains live, meaning the compromised access has not been revoked as of the time of reporting. Wasabi and Spicy LP-share tokens from affected vaults have been flagged as compromised, with redemption value approaching zero. Users with funds in Wasabi perpetual vaults or LongPool across any of the four affected chains should treat their positions as at serious risk until the protocol issues a definitive post-mortem and remediation plan.

[madtrader]

The entire security architecture was one unprotected key and no timelock, which means the protocol was not hacked so much as left unlocked.