RetoSwap halted trading on May 20 after Haveno lead developer woodser warned the trade protocol was under active exploit; PeckShield says roughly 7,000 XMR, worth $2.7M, was drained from users. The bug let attackers send fake out-of-order ACK messages that replaced the arbitrator node address before the multisig was created, giving them control of the third key. RetoSwap says its team was not compromised, fiat traders appear unaffected, and trading will stay paused until the protocol is reviewed and patched.

TLDR by @Benthic

More on Exploit

Comments