Wu Shuo learned that the decentralized Bitcoin trading platform Bisq announced that the final compensation model for the previous vulnerability will be submitted for DAO voting. The current preliminary plan is to allow affected users to choose to receive compensation in BTC or BSQ. Bisq stated that the vulnerability stemmed from the system lacking validation for taker-provided negative input values. Attackers exploited this by providing negative miner fees, causing the multi-signature output amount to be reduced to 0.001 BTC, with the remaining funds transferred to the taker's change output. Bisq said it cannot confirm whether the attack was assisted by AI, but during the investigation, the AI-assisted analysis team was able to locate and reproduce the vulnerability faster than manual checks, and the attacker may have used a similar method.

BTC2.3%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin