Troves paused three Starknet vaults after an exploit linked to lingering contract access in its xWBTC/WBTC vault; the platform put the preliminary loss at about 8.6 Bitcoin (BTC).
Troves is a Starknet platform for automated decentralized finance (DeFi) strategies. It said the affected vault was xWBTC/WBTC, where the loss estimate originated.
An older rebalancing contract remained authorized after the platform replaced it, Troves said. The team said it revoked access within about 40 minutes of finding the exploit and removed rebalancing permissions from its liquid-staking-token vaults.
The platform also suspended xSTRK/STRK and xstrkBTC/strkBTC as a precaution. As of its update, Troves had not found an impact on other vaults.
Security partners are helping Troves locate the funds and assess whether recovery is possible, the platform said. After verifying its findings, Troves plans to publish a postmortem and outline options for affected depositors.
