RetoSwap halted trading after Haveno exploit drained 7,000 XMR ($2.7M) from users.
Security & Exploits ·
A vulnerability in the Haveno trade protocol enabled attackers to drain 7,000 XMR—valued at approximately $2.7 million—from RetoSwap users, according to PeckShieldAlert. The Haveno lead developer reported the active exploit at 2:31 UTC, prompting RetoSwap to respond within minutes.
RetoSwap moved to contain the breach by blocking the exploiters' onion address at 2:33 UTC and halting trading altogether. The exchange used its filter feature to set the minimum client version to 2.0.0, effectively preventing further trades on the platform until the vulnerability could be addressed.
Details on the technical nature of the Haveno exploit and whether the drained funds were recoverable remain unclear. No information has been disclosed about whether users will be compensated or how long RetoSwap trading will remain suspended.