Retoswap reacts quickly, but 7000 XMR is gone— the cost of privacy coins.

GoPlusSecurity says Haveno’s P2P multi-signature DEX has a vulnerability: attackers can exploit state machine flaws to forge out-of-order confirmation messages, hijack multi-signature wallets, and steal about 7,000 XMR (approximately $2.7 million). Retoswap has blocked the attacker’s address and paused the related transactions. Haveno’s code is affected, and other forks also face risks. Monero’s enhanced privacy increases the difficulty of tracing, highlighting the importance of strict state machine design. Please deploy the patch immediately and upgrade your client; do not trade until security is confirmed.