PANews reported on May 4th that, according to official Bisq news, the protocol was recently attacked due to a lack of verification mechanisms, resulting in the theft of approximately 11 BTC, primarily involving altcoin transactions. The attackers exploited a negative miner fee vulnerability, transferring funds to their own accounts through multi-signature transactions. Currently, Bisq is discussing a compensation plan, with victims able to choose between Bitcoin or BSQ tokens for compensation. However, this plan requires a vote by the DAO and is expected to be finalized after the DAO cycle ends on May 25th.
Bisq stated that it has fixed the vulnerability and plans to release a patch update. It has also strengthened its codebase security reviews, focusing on preventing vulnerabilities that could affect wallets. Furthermore, Bisq advises users to temporarily reduce the amount of BTC stored in their wallets. The official statement considers the incident serious but manageable and hopes to serve as a security warning to other projects.

