Preliminary loss of approximately 8.6 BTC, Troves xWBTC/WBTC vault exploited

Odaily reports that Troves disclosed its xWBTC/WBTC vault was exploited on October 31, with an initial loss of approximately 8.6 BTC. The attack only affected this vault, with other vaults currently unaffected. The cause was that a replaced legacy rebalancing contract still retained permissions. The team has revoked the relevant contract permissions and precautionarily paused affected and potentially exposed vaults, including xWBTC/WBTC, xSTRK/STRK, and xstrkBTC/strkBTC. Troves stated that the team is continuing its investigation, tracing funds, and exploring recovery avenues, and has sent an on-chain message to the attacker offering a 1 WBTC white-hat bounty in exchange for the return of remaining funds. A detailed post-mortem report and a resolution plan for affected depositors will be released subsequently.