on-chain
Joined July 2024
- Tweets608
- Following36
- Followers5.2K
- Likes903
How to Use RetoSwap:
Buy Monero with BTC or Cash | RetoSwap Beginner Guide by @CpBreezeTech
youtube.com/watch?v=Jx-PXSUQ…
RetoSwap retweeted
Install RetoSwap on Tails OS with Persistent Storage | Haveno-Based Monero P2P Exchange
Links:
tails.net/ github.com/retoaccess1/haven… tech.cpbreeze.com/install-re…
RetoSwap is back up and running!
The team is actively coordinating recovery with all affected users.
We have thoroughly reviewed the Haveno codebase and are taking measures to proactively detect weaknesses.
We value your continued trust in these unprecedented times of AI enabled attacks and are committed to do everything in our power to ensure the protocols safety.
If you have been affected by today's incident please back up the following folder ASAP and keep it safe. It will be required for potential recovery plans:
Linux: ~/.local/share/Haveno-reto/xmr_mainnet/wallet
macOS: ~/Library/Application Support/Haveno-reto/xmr_mainnet/wallet
Windows: ~\AppData\Roaming\Haveno-reto\xmr_mainnet\wallet
You can back up manually or via the Haveno backup feature.
The RetoSwap team has not been compromised.
This was a flaw in the Haveno protocol.
Damage appears to be contained to large scale crypto offers with fiat traders unaffected. We are assessing options to help affected traders recover.
The protocol is currently getting analyzed for related issues. Trading will resume after the protocol is deemed secure and a patch has been released.
The specific issue has already been identified.
Per woodser "here's how the exploit worked: when the attacker took a trade, they sent a fake, out-of-order ACK message impersonating the arbitrator, causing the software to update the arbitrator's node address to their own, allowing them to create a compromised multisig wallet before funds were deposited".
Congrats to @Battery__LB and @yawmaya for taking the top spots in our Meme Contest. Both winners are splitting the $100 prize in XMR.
Comment your RetoSwap wallet address below so we can send the rewards.
Thanks to everyone who submitted memes and kept the timeline entertaining!
