Pluang Troves DeFi Platform Exploit Results in 8.6 BTC Loss
Article Content
- •Troves lost 8.6 BTC due to an exploit in its vault on October 31, 2026.
- •The exploit was linked to an outdated rebalancing contract that still had access.
- •Troves has paused three vaults and is working with security experts to trace stolen funds.
On October 31, 2026, Troves, a decentralized finance platform on Starknet, lost 8.6 Bitcoin due to an exploit in its xWBTC/WBTC vault. The breach was attributed to an outdated rebalancing contract that retained access after being replaced. In response, Troves revoked the old contract's permissions and paused three vaults for a security review. The platform is collaborating with security experts to trace the stolen funds and plans to provide users with a detailed report and recovery options soon. This incident follows a recent exploit on Avalanche, highlighting ongoing vulnerabilities in DeFi platforms. As of November 1, 2026, the cryptocurrency market showed mixed performance, with 23 of 50 major cryptocurrencies rising.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Troves in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What caused the exploit?
What actions is Troves taking?
How much Bitcoin was lost?
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…