Digital Asset
Intelligence
Security Incident

Troves Smart Contract Vulnerability: $667.00K Reported Loss

·Source-attributed incident record

Incident Overview

On October 31, 2026, Troves (a DeFi protocol on Starknet) had its xWBTC/WBTC vault exploited, resulting in a loss of approximately 8.57 WBTC (about $667,000). The cause was a legacy rebalancing contract that retained permissions after being replaced. The team revoked the permissions, paused affected vaults, and offered a whitehat bounty for fund recovery.

Sources & References

Original incident referencehttps://x.com/trovesfi/status/2116541963755475375 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    b14g

    Attack methodSmart Contract Vulnerability
    Reported loss$ 1,470,000
  2. Incident date
    Target

    Premia V3

    Attack methodSmart Contract Vulnerability
    Reported loss$ 400,500
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed