The decentralized Bisq exchange has suspended trading activity

The decentralized Bisq exchange suspended trading on Tuesday night after a hacker exploited a software flaw to steal $ 250,000 worth of cryptocurrencies from users.

“About 24 hours ago, we discovered that an attacker was able to exploit a flaw in Bisq’s commercial protocol, targeting individual transactions, to steal trading capital. We are aware of about 3 BTC and 4,000 XMR stolen from 7 different victims. This is the situation as we know it so far “,

said Bisq in a statement to CoinDesk.

In order to steal, the attacker set the default withdrawal address of other users with their own address. The fallback address is the one where the cryptocurrencies are sent if the transaction is not completed. Subsequently, the picture was in the seller, a transaction began and not finalized, so that the funds were transferred to him instead of the rightful owner.

Bisq managed to remedy the defect in about 24 hours and resumed normal activity on Wednesday afternoon.