Troves discloses that x WBTC/WBTC vault was attacked, with preliminary losses estimated at approximately 8.6 tokens BTC
BIBIBI
AT A GLANCE
Troves says its x WBTC/WBTC vault was attacked, with preliminary losses estimated at approximately 8.6 tokens BTC。
Article
Troves suffered losses of approximately 8.6 tokens BTC, and has offered the attacker 1 tokens WBTC white-hat bounty
BlockBeats reported that November 1，BTCFi protocol Troves stated in a post that its x WBTC/WBTC vault was attacked this morning, with preliminary estimates putting the losses at approximately 8.6 BTC. The investigation currently indicates that the attack was limited to this vault, and no impact has so far been identified on other Troves vaults.
Troves stated that the attack involved an outdated rebalancing contract that had been replaced but still retained permissions. The team has revoked the permissions of the relevant contract and, as a security precaution, paused the affected vault and those that may pose risks. It is currently working with security partners to track the stolen funds and assess recovery options.
In addition, Troves proposed a white-hat bounty to the attacker through an on-chain message, promising to pay 1 WBTC as a reward after the remaining funds are returned. The team stated that it will later publish a detailed post-mortem and a plan for handling affected depositors.
Original link https://m.theblockbeats.info/flash/374852
Key points
01
Troves stated that its x WBTC/WBTC vault was attacked in the November 1 early morning.
02
Troves preliminarily estimates losses of approximately 8.6 tokens BTC。
03
The investigation currently indicates that the attack was limited to this vault, and no impact has so far been identified on other Troves vaults.
04
Troves stated that the attack involved an outdated rebalancing contract that had been replaced but still retained permissions.
05
The team has revoked the permissions of the relevant contract and paused affected and potentially risky vaults.
06
Troves has proposed a white-hat bounty to the attacker, promising to pay 1 tokens WBTC。
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This was a vault security incident disclosed by Troves. The project stated that the outdated rebalancing contract still retained permissions, resulting in the x WBTC/WBTC vault being attacked; the team has revoked the permissions and paused the relevant vaults.
Why it matters to readers
The incident involved losses of approximately 8.6 tokens BTC and also involved permissions management for an old contract. The subsequent fund recovery, incident post-mortem, and user handling plan have yet to be announced.
A vault is a smart contract used to store and manage assets. Even if an old contract is replaced, it may still pose security risks if its permissions are not revoked.
Risks and unknowns
The loss amount remains a preliminary estimate.
It has not yet been confirmed whether the funds can be recovered.
It has not yet been confirmed whether the attacker will return the funds or whether the white-hat bounty will be executed.
Whether other Troves vaults were affected remains subject to ongoing investigation.
The plan for handling affected depositors has not yet been announced.
Related Developments
Loading event timeline…
Related concepts
BTCFi
This term is not in the glossary yet. Browse related concepts in the glossary.
