Bisq promises users refund in 'likely' 11 BTC AI-assisted exploit

On May 1, 2026, decentralized Bitcoin exchange Bisq revealed that a hacker had exploited its v1 trade protocol, draining an estimated 11 BTC from open offers. Nonetheless, the project said it is working to reimburse all affected users and flagged the incident as a likely example of AI-assisted exploitation.

Bisq first announced the breach last week Friday, saying that the exploit “allowed an attacker to drain a portion of available offers,” according to the project’s X update. Two days later, Bisq published a follow-up thread sharing its findings and a reimbursement framework.

According to the May 3 update, the total amount stolen is estimated to be around 11 BTC, based on data analysis and reports from affected users. Apparently, only altcoin trades have been affected so far, with the project suggesting that these are preliminary figures and that final numbers could vary as more users come forward.

Bisq has reimbursement plan already in place

Bisq maintainer Henrik Jannsen shared the reimbursement approach via GitHub on May 3. The project’s goal is to provide “fast, full reimbursement with as little friction as possible for affected users,” Jannsen wrote.

However, several issues might affect that timeline. For example, victims are required to open arbitration cases through Bisq’s protocol, and arbitration only becomes available after trade time locks expire (10 days for altcoin trades, 20 days for fiat trades). 

The reimbursement proposal also requires approval through Bisq’s DAO voting process, with the current cycle expected to end around May 25.

Jannsen said the approach is to let affected users choose reimbursement in either Bitcoin or BSQ, Bisq’s native governance token. In a follow-up comment shared today, May 4, he confirmed the project’s preference: “Our goal is to reimburse users in Bitcoin (optionally, they can choose BSQ) and to do that as fast as possible to avoid volatility issues.”

Two users shared their grievances in the X thread. One seller described the stolen funds as trading capital and pushed back against BSQ-based reimbursement, arguing that users converting BSQ into BTC simultaneously would cause slippage and additional losses. The second user also shared similar worries and was curious about the reimbursement timeline.

AI-assisted attacks are a worrying trend 

Interestingly, the Bisq update referenced “the growing role of AI-assisted attacks” as part of its broader observations on the incident. However, the project did not detail exactly how AI may have been used in this specific exploit.

The timing coincides with a bigger trend, according to a previous Cryptopolitan report. A Binance research also pointed out that AI models are currently about twice as effective at exploiting smart contract vulnerabilities as they are at detecting them, with the cost of AI-powered exploits falling by about 22% every two months. 

The research, published on April 30, found that AI-enabled scams extract 4.5 times more money than traditional ones and that impersonation tactics increased by 1,400% year-over-year as of 2025.

In other news, a16z crypto recently tested a new AI coding agent against 20 past price manipulation incidents on Ethereum and found a 10% success rate when the agent used only basic tools. That figure jumped to 70% when the agent received more knowledge about common attack patterns, according to Cryptopolitan.

As for the reimbursement timeline, the next date to look forward to is the Bisq DAO cycle, where the DAO is expected to vote on a formal reimbursement proposal around May 25. As altcoin trade arbitration windows start opening from May 11, affected Bisq users could open arbitration cases as soon as their time locks expire.

There’s a middle ground between leaving money in the bank and rolling the dice in crypto. Start with this free video on decentralized finance.