Starknet ecosystem DeFi protocol Troves suffered an exploit on October 31 targeting its xWBTC/WBTC vault, resulting in an initial loss of approximately 8.6 BTC. The breach was isolated to that single vault, with other vaults remaining unaffected. The root cause was traced to a legacy rebalancing contract that had already been replaced but still retained active permissions. Troves has since revoked the compromised contract's access and paused three vaults as a precaution: xWBTC/WBTC, xSTRK/STRK, and xstrkBTC/strkBTC. The team is actively tracing stolen funds and exploring recovery options. Troves sent an on-chain message to the attacker offering a 1 WBTC white-hat bounty in exchange for returning the remaining assets. A detailed post-mortem report and compensation plan for affected depositors are expected to be released soon.