727 FinancePANews November 1 news: Troves, a DeFi protocol in the Starknet ecosystem, disclosed that its xWBTC/WBTC vault suffered an exploit on October 31, with an initial loss of approximately 8.6 BTC. The attack was limited to this vault, and other vaults have not been affected for now. The cause is that the replaced old version of the rebalancing contract still retained permissions. The team has revoked the relevant contract permissions and, as a precaution, paused the affected and potentially exposed vaults, including xWBTC/WBTC, xSTRK/STRK, and xstrkBTC/strkBTC.
Troves stated that it is continuing to investigate, trace the funds, and explore recovery avenues, while also sending an on-chain message to the attacker offering a 1 WBTC white-hat bounty in exchange for the return of the remaining funds. A detailed post-mortem report and a handling plan for affected depositors will be released later.