ChainCatcher report: According to market sources, the protocol was recently exploited due to the absence of a verification mechanism, resulting in the theft of approximately 11 BTC, primarily involving altcoin trades. The attacker exploited a negative miner fee vulnerability to transfer funds to their own account via multisignature transactions. Currently, Bisq is discussing compensation options, with victims able to choose compensation in either Bitcoin or BSQ tokens; however, implementation requires approval via DAO vote and is expected to be finalized after the DAO cycle ends on May 25. Bisq has patched the vulnerability and plans to release a software update while enhancing security reviews of its codebase, with a focus on preventing vulnerabilities that could affect wallets. Additionally, Bisq advises users to temporarily reduce the amount of BTC held in their wallets. The official team considers the incident serious but contained and hopes it serves as a security warning for other projects.
Bisq Protocol Hacked, 11 BTC Stolen, Compensation Plan Under Discussion
ChaincatcherShare
Summary
The Bisq protocol update reveals a recent hack that resulted in the theft of 11 BTC, primarily from altcoin trades. Attackers exploited a negative miner fee flaw in a multisig transaction to siphon funds. The project is now developing a compensation plan, allowing victims to choose between Bitcoin or BSQ tokens. A DAO vote will determine the next steps, with a decision expected after May 25. A BTC update confirms the vulnerability has been patched, and a new fix is in development. Users are advised to minimize BTC holdings in their wallets for now.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.