BlockBeats news, November 1 - BTCFi protocol Troves posted that this morning its xWBTC/WBTC vault suffered an attack, with preliminary estimates of losses at approximately 8.6 BTC. Current investigations show that the attack scope is limited to this vault, and other Troves vaults have not been found to be affected.
Troves stated that the attack involved an old version rebalancing contract that had been replaced but still retained permissions. The team has revoked the relevant contract permissions and, for security reasons, suspended the affected and potentially at-risk vaults. They are currently working with security partners to track the stolen funds and assess recovery options.
Additionally, Troves has proposed a white-hat bounty plan to the attacker via on-chain message, promising to pay 1 WBTC as a reward after the remaining funds are returned. The team stated that a detailed incident review and a handling plan for affected depositors will be announced later.
