Bisq v1.10.4 is released. This important security update fixes vulnerabilities identified during our recent security audit. Updating is required to continue trading. BSQ Swaps are re-enabled. ## Release notes This is an important security update that fixes vulnerabilities identified during our recent security audit. Updating to this version is required to continue trading. BSQ Swaps have also been re-enabled. ### Security - **DAO block signatures**: DAO blocks received from the network can now be signed by trusted BSQ block providers. Bisq verifies these signatures before accepting the blocks. - **Blind-vote validation**: Bisq rejects blind votes whose encrypted payload does not match the on-chain commitment, and decrypts vote results only from the ballots that match the majority hash. - **Dispute-opening validation**: New dispute cases are validated before being accepted. Disputes that fail validation are rejected. - **Arbitrator-witness signatures**: Signed witness records are now checked for valid DSA signatures before being used for account aging. - **Seed-only data filtering**: Network data that is intended to come only from seed nodes is now rejected when received from non-seed peers. - **Price-zero offer rejection**: Offers with a price of zero are rejected and not added to the offer book. - **Burning Man fee routing**: The Burning Man distribution address list is now used when selecting BTC fee receivers. - **Trusted seeds**: Trusted seed nodes are used during network bootstrap. ### Other changes - Alert authors can remove all alerts they created. - Legacy arbitrator data has been removed from trade and deposit flows.

## Why can a decentralized exchange halt trading or temporarily deactivate features? This question comes up regularly, and it's a fair one. First, these measures are not strictly enforced. Users can opt out by starting Bisq with the `ignoreDevMsg=true` program argument. This option exists to ensure developers cannot unilaterally force restrictions on users. The purpose of these emergency mechanisms is to help prevent greater harm in exceptional situations, such as the May 1 security incident or the recent discovery of critical vulnerabilities. In those cases, temporarily disabling certain functionality is the safest way to reduce the risk of users losing funds while a fix is being prepared and deployed. ### Why not leave that decision entirely to users? The challenge is that disclosing the details of a critical vulnerability before a fix is widely available would also reveal the information needed to exploit it. That means users would have to make a decision without access to the very information that would allow them to assess the risk. In practice, this makes informed individual decision-making difficult. ### Isn't that centralized? Emergency mechanisms like this are not unique to Bisq. Bitcoin itself originally included an Alert system that allowed developers to notify users of critical issues. Once Bitcoin had matured and the ecosystem no longer depended on it, that feature was removed. Bisq is still evolving and operates in a very different environment, with a smaller user base and more rapid protocol development. At its current stage, we believe these emergency tools provide an important layer of protection against severe incidents. At the same time, users who prefer full control can opt out of these protections. That choice is respected, but it also means accepting responsibility for the additional risk. If emergency warnings or temporary safeguards are intentionally bypassed and an exploit occurs, the Bisq project cannot provide support or compensation for resulting losses.

Release 1.10.3 has been released. This important security update closes vulnerabilities in trade protocol validation, message authentication, and filter safety. Please update as soon as possible. Download the release from within the app or from GitHub:

GitHub

Release v1.10.3 · bisq-network/bisq

Release notes This is an important security update that closes several gaps in trade protocol validation, message authentication, and filter safety...

Update on the trading halt: We are close to publishing a new release, provided the final testing and audit do not reveal any further issues. Thanks for your patience and understanding. Security has the highest priority for Bisq.

As a precautionary measure, trading on Bisq 1 has been temporarily halted until a security update is released. The update is expected very soon. We apologize for the inconvenience, but we're sure you'll agree that security comes first. Open trades can be resumed after updating.

A new Bisq release (v1.10.2) is available. All users are strongly encouraged to update as soon as possible. Release highlights: • Strengthens DAO consensus validation and merit verification. • Improves precision in DAO voting and issuance calculations. • Adds protections against invalid consensus states. • Includes extensive regression testing to ensure consensus integrity and compatibility. Update directly from within Bisq or download here:

GitHub

Release v1.10.2 · bisq-network/bisq

Release notes DAO Consensus Security DAO merit validation is hardened at and after block 954_200. V2 merit validation checks embedded merit issuan...

Bisq - A decentralized bitcoin exchange network

Where Bisq Stands After the May 1, 2026 Security Incident

Bisq is an open-source desktop application that allows you to buy and sell bitcoin in exchange for national currencies, or alternative cryptocurren...

# Bisq v1.10.1 has been released

GitHub

Release v1.10.1 · bisq-network/bisq

This release addresses concerns about the overly restrictive trade amount limits introduced in the previous release and fixes a bug affecting BSQ s...

This release mainly addresses concerns about the overly restrictive trade amount limits introduced in the previous release and fixes a bug affecting BSQ swap trades. ## Release notes ### Trading - Maximum trade limits were increased to 0.250 BTC. - The risk-based reduction factors for the 4 risk classes were changed from `1, 2, 4, 8` to `1, 2, 3, 4`. This results in trade limits of up to 0.250 BTC for Altcoins and up to 0.0625 BTC for higher-risk fiat payment methods such as SEPA or Zelle. - Fixed a bug in BSQ swap fee validation and added additional validation checks. - Trade statistics validation was adjusted for the reduced trade limits introduced in the previous release. ### UX And Settings - Updated the user agreement. - Trade rules are now shown when users create or take an offer for the first time. - Trade rules and the user agreement are now available from Settings → About. - The cold-storage reminder threshold is now configurable in preferences. ### Release Process - Debian package dependency generation now relaxes `t64` dependencies while preserving the original constraint or qualifier on the non-`t64` alternative. See full release notes at:

GitHub

bisq/release-notes/1.10.1 at master · bisq-network/bisq

A decentralized bitcoin exchange network. Contribute to bisq-network/bisq development by creating an account on GitHub.

Bisq v2.1.11 released. Main focus of this release: • Major security and hardening improvements • Stronger release verification and update protection • Better Tor reliability and macOS Apple Silicon support Please update as soon as possible!

The Bisq v1 security incident post-mortem is now available. It details the exploit, investigation findings, reimbursement proposal, and the security improvements introduced in v1.10.0 following the attack.

Bisq - A decentralized bitcoin exchange network

Security Incident Post-Mortem

Bisq is an open-source desktop application that allows you to buy and sell bitcoin in exchange for national currencies, or alternative cryptocurren...