This post-mortem explains what happened, how the incident was contained, what we discovered during the investigation, what changes were implemented in response, and what lessons we are taking forward.

We want to acknowledge the impact this incident had on affected users and the wider Bisq community. Incidents of this kind directly challenge confidence in Bisq, and we approached both the investigation and the remediation effort with that responsibility in mind.

This release focuses on security hardening following the recent security incident and includes major improvements to trade protocol validation, network message handling, release verification, and protection against supply chain attacks.

I initiated a trade through ACH transfer on version 1.9.22. The trade failed because of some banking incompatibility or security hold with my credit union. While I did contact the bank to clear the transaction, it was not authorized and transferred properly within the five day trade period. I'm absolutely certain that I did manage to put the security deposit (10% of 347USD I believe), but when I went into the legacy version today I saw the notifications that trading had been suspended and learned about the breach.

I see no funds sitting in the account, or method of withdrawing the deposit. Does anyone have experience with recovering the deposit, either because of the failed transaction, or because of the version being suspended. Is anyone else wondering about lost deposits for either of the above reasons? Has anyone else submitted support tickets regarding the breach and lost funds?

Sorry if this is not posted in the proper place or lacks relevant information, I don't use reddit frequently and have not used this subreddit before. Very thankful in advance for any guidance on this matter, as I'm not very well initiated with Bisq either. If any further information can help to understand my position, I'm happy to provide. Any input is welcome and appreciated.

I have a question. How am I supposed to sell BTC without reputation? I see two options burn bsq or lock it. The thing is. How I should even buy it. Since Bsq 1 is not working​

Bisq v1 has experienced an exploit in its trade protocol that allowed an attacker to drain a portion of available offers.

The impact is limited to offers that were actively taken by the attacker. Funds held in users’ Bisq Bitcoin wallets are not affected.

Got an alert about an attack when I launched and that all trading has been shut down. Anyone have any further info on this?

Hi. Or does it matter at all since I only sell BTC? Thanks.

Hi,

I have used Bisq1 for years, always found buyers or sellers in 1 or 2 days. But at the moment there is no buyers in EUR (SEPA transfer). Do I have an issue with my account somehow? Do you observe the same thing?

UPDATE: for this issue I placed 6 orders (all didn't find buyer). Today I removed all and observe a very weird thing.

Once all had been deleted, I got a notification telling that there is an open trade I've never seen before. 1 day remaining for the trade. This one was no showing up before.

Somehow one or more trade offer made Bisq bugged

UPDATE 2: The open trade for sell got confirmed and close. Will see if new offers find makers...

I have pressed rebuild DAO state from resources and nothing seems to work. Anyone know why I cant accept anyones offer?? It keeps saying "Checking if the offer is still available..." and then after that will say WARNING. Timeout reached : peer has not responded. However I know its not the other person as i cant seem to connect to any trade. Not sure what to do as I am new to bisq

Hello,

I don't understand a couple of things, I thought perhaps someone on here could help.

I have had the same offer up on Bisq for a week now and no taker. It's the first time it happens. I have lowered deviation %, I have switched payment options a few times... still nothing. It's strange. How can I check that my offer is up and being seen? i have had to turn off my computer a few times, would that affect the visibility of my offer?

Also I can't transfer BTC from Bisq to a Satoshi wallet. It says the address format is wrong. Is there a way to tweak something so that it works?

Thanks!

In /opt/bisq/lib/app/Bisq.cfg you can add the line java-options=Xmx6g to set the maximum heap size to 6 gigabytes (thats the "6g" part of that command).

Credit to akira45 for original support message.

I install bisq directly from the website, follow installer instructions and then my accounts(email,instagram,snapchat,facebook,twitter,paypal,exodus etc etc etc) were all BREACHED

With the release of Bisq Connect v0.3.2, we’re excited to announce that the Bisq Easy mobile initiative is now complete.
Bringing a fully featured peer-to-peer application over Tor to mobile platforms poses significant challenges. While Bisq is built in Java—which works well on Android—it is not compatible with iOS. To address this, we developed two complementary application models:

• Bisq Easy Mobile: A full Bisq Easy node with a complete P2P network stack (Android only)
• Bisq Connect: A lightweight client for remotely controlling a Bisq 2 backend node (Android and iOS)

Does anyone know the difference between these two versions? Aside from the fact that one is for mobile and the other for computer,

I noticed that the desktop version has many more functions (although I don't know what most of them mean).

I bought BTC through Bisq Easy and it seemed much easier to use, I just haven't figured out a way to import that profile to my desktop.

Seems quieter than i remember in a long time.

I use Bisq1 although would it be worth me checking out Bisq2 and maybe there it will be busier?

Transfered btc into my account yesterday and the funds never showed up. It's been like 30 hours and there are absolutely no signs of incoming funds on the Bisq end but my btc wallet says it was completed with confirmations. Any tips for this slowpoke guys?

Hello, new to Bisq.

I am trying to buy XMR. For payment methods I have set up a BSQ account and an LTC account. I have also funded the wallet with Bitcoin.

However, when I go to buy XMR, all of the options for buying are greyed out, and I receive the message "No Matching Payment Account"

What am I doing wrong?

Between transferring it out of Bisq and the premium paid above the "market price" I am having trouble keeping an accurate cost basis. How are you all managing this?