Bisq Decentralized Exchange Developers Announce Critical Vulnerability, which hackers have already used. Trading on the exchange was suspended.
According to a statement on the company's blog, hackers were able to use the vulnerability to access separate transactions of third -party users and theft of funds. Currently, the amount of stolen assets is estimated at $245 000. The developers write:
“We know, that the attackers stole approximately 3 BTC и 4 000 XMR for seven users. The only market, subject to vulnerability - XMR/BTC, And all transactions, which hackers got access to, were committed over the last 12 days ".
The BISQ statement emphasizes, that vulnerability is associated with the method of transactions, but not with the keys of smart contracts and those, How the funds are stored. Therefore, there is no large -scale threat to users.
Besides, The developers have already released a protocol update, Correcting vulnerability, However, the warrant will need to be created again. Operation, lost funds as a result of the attack, Compensation will be paid.
“Security has always been the highest priority for Bisq, But this incident showed, that we may have errors. The project considers several possible ways to strengthen the safety of smart contracts ", - noted in the statement of the exchange.
Previously, large -scale material entered Bits.media, which understand the reasons for the freedoming hacks of projects of decentralized financing, as well as possible ways to protect.
