Bisq releases version 1.10.8 with fixes for vulnerabilities found in a security audit

Bisq has released an urgent 1.10.8 update. It fixes vulnerabilities found in a security audit. The fixes affect refund payouts: these now require verified escrow data and authorization from the claimant or agent. Reuse of refund receipts and cross-network payout reservations are blocked, and refund transactions are checked more thoroughly. Burning Man proposal, BSQ swap signature and fee recipient checks have also been fixed, and Tor has been updated. The vendor does not state that the vulnerabilities were exploited. The refund logic flaws concern funds in trades, and trading is no longer possible without updating.