Troves Loses 8.6 BTC in Vault Attack, Offers 1 WBTC Bounty

BTCFi protocol Troves said on November 1 that its xWBTC/WBTC vault was attacked earlier that day, with initial losses estimated at about 8.6 BTC. The attack appears confined to that vault; no other Troves vaults were affected. According to Troves, the exploit used an outdated rebalancing contract that had been replaced but still held permissions. The team has revoked those permissions and suspended the affected vault and other potentially exposed vaults as a precaution. Troves is working with security partners to trace the stolen funds and assess recovery options. It also sent an onchain message to the attacker offering a 1 WBTC bug bounty for return of the remaining funds. A detailed incident review and a resolution plan for affected deposit holders will follow soon.