Troves xWBTC/WBTC vault suffered an attack, with preliminary loss of approximately 8.6 BTC

DeepChao TechFlow reported that on November 1, DeFi protocol Troves announced that its xWBTC/WBTC vault suffered an exploit on October 31, with preliminary estimated loss of approximately 8.6 BTC.

Based on the current investigation, the attack only affected the xWBTC/WBTC vault, and no other Troves vaults have been found to be affected. The attack was related to an older rebalancing contract that had been replaced but still retained operational permissions.

Troves said it has revoked the relevant contract permissions and, for security reasons, has paused the affected and potentially at-risk vaults. The team is currently working with security partners to track the stolen funds, assess the full extent of losses, and explore fund recovery options. A detailed incident postmortem and a resolution plan for affected depositors will be released later.

Source: DeepChao TechFlow