bisq · Bisq
Update to incident: Bisq releases version 1.10.8 with fixes for vulnerabilities found in a security audit
Bisq 1.10.9: more audit fixes; trading unavailable without the update
The vendor has released the next version following the same security audit: it adds verification of BSQ swap inputs and signatures on both sides of the trade (outpoint binding and duplicate input checks), the API no longer allows confirmation that payment has started before the seller's payment details have been received, and Tor has been updated to 0.4.9.13. Bisq says the update is mandatory to continue trading.
Actions to take
Update Bisq to version 1.10.9 before your next trade; before installing, verify the downloaded file's signature according to the vendor's instructions — the release is linked in the post.
Source: github.com
Incident history
- 16 SeptBisq releases version 1.10.8 with fixes for vulnerabilities found in a security audit
- 01 OctBisq 1.10.9: more audit fixes; trading unavailable without the update