Troves xWBTC/WBTC vault on Starknet exploited for 8.57 WBTC via legacy rebalancing contract; team offering 1 WBTC bounty for whitehat recovery by November 3, 2026.
Security & Exploits ·
An exploit of the Troves xWBTC/WBTC vault on Starknet resulted in the removal of 8.57 WBTC-equivalent on October 31, 2026, through a legacy rebalancing contract. Troves is offering a 1 WBTC bounty for the return of the remaining funds under a whitehat recovery arrangement, with the offer valid until November 3, 2026 at 23:59 UTC. The team has provided contact channels including an Ethereum wallet address and email for coordination of the recovery.