Solv Protocol

2026

Bitcoin

Monero

RetoSwap, a leading privacy-focused peer-to-peer decentralized exchange for trading Monero (XMR) against fiat and other cryptocurrencies over Tor, has temporarily suspended all trading after a new security exploit was detected in the underlying Haveno protocol. 
<blockquote class="twitter-tweet">
 Today at 18:02 UTC we have received a report that the Haveno trade protocol is actively being exploited. The team immediately halted trading by setting the minimum client version to 2.0.0 using the filter feature and banned the exploiters onion address.
 — RetoSwap (@RetoSwap) <a href="https://x.com/RetoSwap/status/2066960238545162410?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 16, 2026</a>
</blockquote>
The RetoSwap team received the first <a href="https://x.com/RetoSwap/status/2066960238545162410?s=20" rel="noopener noreferrer nofollow">report</a> around 18:02 UTC (2:02 AM Beijing time) on June 16, 2026. They responded swiftly by raising the minimum client version to 2.0.0, blacklisting the attacker’s onion address (<a href="https://x.com/RetoSwap/status/2066960240621273236?s=20" rel="noopener noreferrer nofollow">fg2lhfh…2qpad.onion</a>), and halting trading. Trading will remain paused until a full security patch is developed, tested, and released.This is the second major incident involving the Haveno protocol within a short period. In <a href="https://x.com/RetoSwap/status/2056984875383632226?s=20" rel="noopener noreferrer nofollow">mid-May 2026</a>, attackers exploited a flaw in ACK message handling and arbitrator impersonation during multisig wallet creation, resulting in the theft of approximately $2.7 million (around 7,000 XMR). Losses were mainly limited to large crypto-to-crypto trades, with fiat traders largely unaffected.
The May Haveno exploit occurred during a month that saw elevated losses across the crypto sector. According to industry tracking, crypto projects lost more than <a href="https://cryip.co/may-2026-crypto-hacks-report-84-2-million-lost-across-41-incidents/" rel="noopener noreferrer nofollow">$84 million across 41 security incidents</a> in May 2026 alone, highlighting the broader challenges facing protocol security and risk management across decentralized ecosystems.
The latest June exploit targets the dispute resolution and forced arbitration mechanism. According to community updates and Haveno contributors, the attacker (acting as a buyer) took buy offers, forced arbitration, and managed to release XMR after Bitcoin confirmations (around 30 blocks) without sending the corresponding BTC. Notably, this incident appears to involve what looks like legitimate arbitrator addresses in some cases, differing from the May attack vector.
The incident also follows a series of recent protocol-level exploits affecting decentralized finance platforms. Earlier this month, <a href="https://cryip.co/solv-protocol-exploit-2-7m-lost-in-bro-vault-due-to-smart-contract-vulnerability/" rel="noopener noreferrer nofollow">Solv Protocol suffered</a> a $2.7 million loss linked to a smart contract vulnerability in its Bro Vault, underscoring how both application-layer and protocol-layer weaknesses continue to pose significant risks to users.
RetoSwap <a href="https://x.com/RetoSwap/status/2066960242802356465?s=20" rel="noopener noreferrer nofollow">confirmed</a> that its own infrastructure was not breached. The vulnerability lies entirely within the Haveno protocol. Losses in this new incident appear limited so far, as the team acted quickly to contain it. Haveno lead developer woodser stated:
<figure class="wp-caption aligncenter"><img src="https://cryip.co/wp-content/uploads/2026/06/woodser.png" alt="woodser" width="1918" height="487">
 <figcaption><a href="https://x.com/themerit0crat/status/2066993603059044753?s=20" rel="noopener noreferrer nofollow">woodser</a>
 </figcaption>
</figure>
Advice for Users
<ul>
 <li>Revoke all open offers immediately</li>
 <li>Check and back up your application data</li>
 <li>Avoid any further trading until the patch is deployed</li>
 <li>Contact support via the official SimpleX group (“chat with admin”) if you have affected trades</li>
</ul>
RetoSwap is an active implementation/fork of the Haveno protocol, offering fully non-custodial, Tor-based P2P Monero trading with 2-of-3 multisignature escrow. Haveno itself originated as a fork of Bisq, aiming to provide strong privacy and decentralization. However, the repeated issues in message validation, address handling, and arbitration logic have exposed challenges in securing these complex decentralized systems.
The RetoSwap and Haveno teams are working on a verified security patch. Trading is expected to resume only after the update is thoroughly tested and released. The team is also evaluating recovery options for any affected users and plans to release a detailed post-mortem report.This back-to-back incidents highlight the real-world difficulties in building secure peer-to-peer trading protocols, especially for high-value privacy assets like Monero. While the core vision of private, non-custodial trading remains important amid global regulatory pressures, these events emphasize the need for rigorous auditing and rapid community response.We will continue monitoring for official patch releases, loss estimates, and any compensation details from the teams.

RetoSwap Suspends Trading Following Second Exploit in Haveno Protocol

CRYIP

Other articles published on Jun 17, 2026

Join our free newsletter for daily crypto updates!