Initial loss of approximately 8.6 BTC, Troves xWBTC/WBTC vault attacked

Odaily report: Troves disclosed that its xWBTC/WBTC vault was exploited on October 31, with an initial loss of approximately 8.6 BTC. The attack only affected this vault, while other vaults were temporarily unaffected. The cause was that the replaced old version of the rebalancing contract still retained permissions. The team has revoked the relevant contract permissions and precautionarily paused the affected and potentially exposed vaults, including xWBTC/WBTC, xSTRK/STRK, and xstrkBTC/strkBTC. Troves stated that the team is continuing to investigate, trace the funds, and explore recovery avenues, and has sent an on-chain message to the attacker offering a 1 WBTC white-hat bounty in exchange for the return of the remaining funds. A detailed post-mortem report and a handling plan for affected depositors will be released later.