a similar attempt on RoboSats exploiting its collaborative-cancel feature. Has anyone else encountered something similar?
I don't know if I've heard this before but I never heard any exploit happening using Robosats even I do research to any SERP; it's a P2P exchange with no KYC but mainly uses Lightning because it has an advantage when it comes to instant sending.
I don't know if scammers have way to scam people using this platform since it's peer-to-peer encrypted with escrow. How can scammers attempt to scam someone using RoboSats? Unless this exploit you mean is actually exists, even escrow can't avoid this, then how will people trust RoBoSats?
For now, honestly, it's impossible; I've never heard that exploit.
One might not necessarily be required to break the escrow itself to carry out a scam involving RoboSats, an escrow protects the trade while the social engineering part happens around it. If the attacker is able to convince the victim to perform some actions that can change or cancel the trade then, the weakness may be in how the protocol features are being manipulated rather than the cryptography or escrow mechanism itself.
Which is why I find OPs mentioning of the collaborative cancel feature interesting. I would also like to know what the actual attack was like and what response the victim was led to believe he or she should perform.
If throughout the attack, the escrow itself remained secure then it would be misleading to call it an escrow exploit, more accurately would be a social engineering attack abusing a legitimate protocol feature.
