DotSwap V1 Attack Steals $685,000 in BTC
DotSwap V1 was attacked on 25 October, with approximately 8.5 BTC worth about $685,000 stolen from its liquidity pools and accounts over four hours. The attacker exploited a legacy server-side signing mechanism and used automated scripts to probe the platform’s interfaces and target 99 Runes tokens. DotSwap V1 used custodial multisignature management for its liquidity pools, and all BTC deposited in V1 pools was affected. Users’ self-custodied wallets were not affected. DotSwap V1 has been taken offline. The team is tracing the stolen funds and working with exchanges and blockchain analytics partners; it says a full incident review and user response plan will follow. The attack raises security concerns for DotSwap V1 depositors, but the reported impact is confined to the platform and does not indicate a broader Bitcoin network compromise.
Neutral
The direct impact is negative for DotSwap V1 and its liquidity providers, whose deposited BTC was affected, but the article reports no losses from self-custodied wallets and no compromise of the Bitcoin network. The roughly $685,000 loss may prompt affected users to withdraw funds from related services and could weigh on confidence in DotSwap and Runes-related platforms in the short term. As with past DeFi and exchange security incidents, traders may also watch for movement of stolen funds, exchange freezes, and the team’s proposed user remedy. However, the loss is limited in scale relative to the broader crypto market, and there is no evidence here of systemic contagion or a change in Bitcoin fundamentals. Longer-term market effects will depend on the incident review, recovery of funds, and whether the team offers credible remediation and improves security. On the available information, a neutral overall market view is more appropriate than a broad bullish or bearish call.