Troves, a decentralized finance protocol in the Starknet ecosystem, said its xWBTC/WBTC vault was exploited on October 31, causing a preliminary loss of about 8.6 BTC. The incident was limited to that vault, with no other vaults affected so far. Troves said a replaced legacy rebalancing contract had retained permissions, which the team has now revoked. The protocol also paused the affected vault and potentially exposed xSTRK/STRK and xstrkBTC/strkBTC vaults. It is investigating, tracing the funds and exploring recovery options, while offering a 1 WBTC white-hat bounty for the return of the remaining funds. Troves said it will publish a post-mortem report and a plan for affected depositors.