# EXPLOIT WARNING - Zerocoin Based Privacy Coins

**URL:** <https://bisq.community/t/exploit-warning-zerocoin-based-privacy-coins/3379>\
**Category:** Altcoins\
**Created:** [November 8, 2017, 8:15am UTC](https://bisq.community/t/exploit-warning-zerocoin-based-privacy-coins/3379 "2017-11-08T08:15:22Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fused\_Helios](https://bisq.community/letter_avatar/fused_helios/32/5_5575768a8748004e209b776fc1b2916d.png) [@Fused\_Helios](https://bisq.community/u/Fused_Helios)\
**Post date:** [November 8, 2017, 8:15am UTC](https://bisq.community/t/exploit-warning-zerocoin-based-privacy-coins/3379/1 "2017-11-08T08:15:22Z")

</div>

EDIT: Exploit Resolved.

Attention,

I am here on behalf of PIVX, please take heed of the following message.

A flaw has been found in the base libzerocoin protocol that has created an exploit that has affected ALL Zerocoin based privacy coins. This includes PIVX, as such all exchanges and service providers must place their wallets into maintenance mode and stop deposits/withdrawals. Not doing this presents a vulnerability to your service.

I would like to apologize for this troubling news. Our team is working on it at this very moment and hopes to have it resolved soon. I again, apologize for this inconvenience.

---

<div class="post-metadata">

**Author:** ![cbeams](https://bisq.community/user_avatar/bisq.community/cbeams/32/3396_2.png) [@cbeams](https://bisq.community/u/cbeams)\
**Post date:** [November 8, 2017, 10:07am UTC](https://bisq.community/t/exploit-warning-zerocoin-based-privacy-coins/3379/2 "2017-11-08T10:07:00Z")

</div>

Thanks for the heads-up, @Fused_Helios. Can you share a link with more information about the exploit?

I’ll note that we’ve only had a few PIVX trades on the network so far, but those were rather recent:

 ![image](https://bisq.community/uploads/default/original/2X/8/861a259f7e62fd8c429e9b43144e3a4832f53746.png)

In any case, Bisq doesn’t support PIVX as a base pair, so all PIVX transactions happen outside of the Bisq exchange (just like all other altcoins used for payment in BTC-based trades). So while there is nothing for Bisq to do (other than possibly de-list zerocoin-based tokens), Bisq users should be still be aware of these issues before engaging in any trades.

@ManfredKarrer, can we do something with the alert system to blacklist PIVX trades for now?

---

<div class="post-metadata">

**Author:** ![Fused\_Helios](https://bisq.community/letter_avatar/fused_helios/32/5_5575768a8748004e209b776fc1b2916d.png) [@Fused\_Helios](https://bisq.community/u/Fused_Helios)\
**Post date:** [November 8, 2017, 8:42pm UTC](https://bisq.community/t/exploit-warning-zerocoin-based-privacy-coins/3379/3 "2017-11-08T20:42:21Z")

</div>

DM’d a response.

---

<div class="post-metadata">

**Author:** ![Fused\_Helios](https://bisq.community/letter_avatar/fused_helios/32/5_5575768a8748004e209b776fc1b2916d.png) [@Fused\_Helios](https://bisq.community/u/Fused_Helios)\
**Post date:** [November 15, 2017, 9:20pm UTC](https://bisq.community/t/exploit-warning-zerocoin-based-privacy-coins/3379/4 "2017-11-15T21:20:03Z")

</div>

FYI, PIVX has released the 3.0.5 wallet which has solved the exploit. I know you guys don’t have a wallet of your own, I just thought I’d update on the situation. I can’t speak for any of the other currencies affected.