RetoSwap (Haveno protocol) on Monero was exploited on June 16-17, 2026 (second incident in 30 days) when dispute resolution logic permitted fund release without proper two-way settlement. Attacker took buy offers, forced arbitration, and released XMR after Bitcoin confirmations without sending BTC.