Swap refund security issue | Update to v0.17.2 before resuming swaps
Read more Show less
On July 14, 2026, the team behind BasicSwap posted an advisory urging trading be halted due to a newly-found security vulnerability. A race condition on the automatic refund path of adaptor-signature swaps, also known as Monero-style swaps, allowed an attacker with a modified client to steal swap funds before a refund was broadcasted to the blockchain. This attack involved targeted risk, as only a counter-party deliberately running a modified client could use it. Regularly completed swaps remain unaffected. A total loss of 0.66 BTC (~$42k) has been reported by the team.
v0.17.2 has been released with a security fix. Users are strongly encouraged to update. Once the update has been performed, its safe to bring the node back online to complete any pending trades.
Stepped down from -22 on resolution · fades to 0 by Jul 2027
Really nice service. I’m glad it’s improving so fast.