The Bisq protocol was attacked, and 11 BTC were stolen. A compensation plan is under discussion.

CoinFeed reported on May 4th that Bisq recently suffered a breach due to a lack of verification mechanisms, resulting in the theft of approximately 11 BTC, primarily related to altcoin transactions. The attackers exploited a negative miner fee vulnerability, transferring funds to their own accounts through multi-signature transactions. Bisq is currently discussing a compensation plan, offering victims the option of Bitcoin or BSQ tokens as compensation, but this requires a DAO vote and is expected to be finalized after the DAO cycle ends on May 25th. Bisq stated that the vulnerability has been fixed and a patch update is planned, along with enhanced codebase security reviews, focusing on preventing vulnerabilities that could affect wallets. Furthermore, Bisq advises users to temporarily reduce the amount of BTC stored in their wallets. The official response considers the incident serious but manageable and aims to serve as a security warning to other projects.