Bisq Protocol Attacked, Approximately 11 BTC Stolen
Bisq has confirmed that its protocol was attacked due to a lack of verification mechanisms, resulting in approximately 11 BTC being stolen, primarily involving altcoin transactions. The attacker exploited a negative miner fee vulnerability to transfer funds via multi-signature transactions.
Bisq has fixed the vulnerability and plans to release a patch update to enhance code security reviews, advising users to temporarily reduce the amount of BTC stored in their wallets.
The company is discussing compensation plans, with victims able to choose compensation in Bitcoin or BSQ tokens, subject to DAO voting, expected to be finalized after the cycle ends on May 25.
Source: Public Information
ABAB AI Insight
Bisq, as a decentralized P2P trading protocol, has long relied on a no-KYC, non-custodial model. This attack exposes the long-standing shortcomings in its multi-signature and verification mechanisms, continuing the trend since 2022 where multiple DeFi/decentralized protocols have been hacked due to smart contract or design vulnerabilities, similar to past incidents like Ronin Network.
In terms of capital flow, the attacker transferred funds at a low cost through the negative miner fee vulnerability. The Bisq team will allocate remaining resources to patching and compensation discussions, with the DAO governance mechanism determining fund distribution. The motivation is to maintain community trust through transparent compensation, but liquidity and user confidence are temporarily damaged.
Similar to previous security incidents, Bisq is at a critical reflection stage regarding the security of decentralized exchanges and user education.
Essentially, this is about technological substitution and risk reconstruction: decentralized protocols are vulnerable to complex attacks due to the lack of centralized verification mechanisms, leading to a shift in pricing power towards centralized/semi-centralized exchanges with strong security audits and insurance mechanisms. The mechanism is that the cost of attacks is low while repairs depend on community consensus, resulting in user funds concentrating from purely decentralized platforms to security-first platforms.
ABAB News · Law of Cognition
The more decentralized, the higher the cost of security vulnerabilities.
Compensation relies on DAO, but trust has already been lost.
Attacks always occur in the most unexpected verification blind spots.