Hack history / 2026 / Hack or exploit
Troves
Hack or exploit on Oct 31, 2026 · Improper Access Control
ONE SOURCE · 1 SOURCE
Lost
$667K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,059
among thefts by dollars lost
What happened
On October 31, an attacker exploited permissions retained by a legacy rebalancing contract after it had been replaced, resulting in approximately 8.6 BTC in losses from Troves' xWBTC/WBTC vault. Troves revoked the legacy contract's permissions and paused three vaults as a precaution. No impact on other vaults has been identified
Details
- Date
- Oct 31, 2026
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- not stated
Reported by
Related incidents
SUPERFORTUNE AI 2026 · Hack or exploit · $15.2M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
MANTRA Chain 2026 · Hack or exploit · $3.6M
Crypto DAO 2026 · Hack or exploit · $8.2M
Coinsbuy 2026 · Hack or exploit · $7.9M
New Market Trading 2026 · Hack or exploit · $4M
MANTRA Chain 2026 · Hack or exploit · $3.6M
Cite this page
SwanBluechip, "Troves hack, Oct 31, 2026: $667K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/hte2fe5480d0/ (data as of 2026-10-31).