Troves xWBTC Vault Exploit on Starknet Drains 8.6 BTC

AI Market Summary
Troves' xWBTC/WBTC vault exploit on Starknet drained roughly 8.6 BTC after a deprecated rebalancing contract retained permissions — a familiar smart-contract hygiene failure. Losses are contained to one vault, with permissions revoked within 40 minutes, limiting systemic contagion. Expect modest negative pressure on STRK and Starknet DeFi TVL, plus renewed scrutiny of access controls across LST-backed vault strategies.
Impact level
● Low
Affected assets
STRK/USDT-1.23%
AI Insight · STRK/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
Troves, a DeFi strategy platform on Starknet, reported that its xWBTC/WBTC vault was exploited for roughly 8.6 BTC after an outdated rebalancing contract kept permissions following replacement. The team revoked the contract within about 40 minutes, stripped rebalancing permissions from its LST vaults and paused the xWBTC/WBTC, xSTRK/STRK and xstrkBTC/strkBTC vaults. No other vaults show impact. Troves is tracking the funds with security partners and will publish a postmortem for depositors.