TAC Suffers $2.8M Cross-Chain Exploit, Vows Full User Compensation

The TON Application Chain (TAC) project has been compromised in a security incident that led to the theft of approximately $2.8 million in digital assets. The exploit targeted TAC’s cross-chain bridge on the TON network, draining funds in USDT, BLUM, and tsTON before the team could intervene.

What Happened and What Was Affected

According to an official announcement posted on X, the attack specifically impacted the project’s cross-chain infrastructure. The stolen assets include roughly $2.8 million worth of USDT, BLUM, and tsTON. TAC clarified that its native TAC tokens and ERC-20 tokens bridged from TON and Ethereum remain unaffected. The bridge has been temporarily suspended while the team conducts a forensic investigation to determine the root cause of the exploit.

A detailed post-mortem report is expected within 48 hours. TAC is working closely with law enforcement agencies, the security response team SEAL 911, and other security partners to trace and potentially recover the stolen funds.

Compensation Plan and Community Response

In a move aimed at restoring user confidence, TAC stated that its foundation will sell its holdings of TAC tokens, following all applicable legal procedures, to fully compensate all affected users. This commitment to full restitution is notable in an industry where victims of exploits often face lengthy recovery processes or no compensation at all.

The announcement has drawn mixed reactions from the crypto community. Some users praised the proactive compensation pledge, while others raised questions about the potential market impact of a large token sale and the long-term security of the platform.

Why This Matters for the TON Ecosystem

This incident is the latest in a series of security challenges facing cross-chain bridges, which have historically been a prime target for attackers due to the complexity of their architecture. TAC is designed to bring Ethereum Virtual Machine (EVM) compatibility to the TON network, making it a critical piece of infrastructure for the growing TON ecosystem. A breach of this nature raises broader concerns about the security posture of cross-chain solutions and the risks associated with bridging assets between different blockchain networks.

For users and investors, the key takeaway is the importance of due diligence when using cross-chain services. While TAC’s swift response and compensation plan are positive signals, the incident underscores the persistent vulnerability of bridge protocols.

Conclusion

The TAC exploit serves as a reminder that security remains a paramount concern in decentralized finance. As the investigation unfolds, the project’s ability to deliver on its compensation promise and implement robust security upgrades will be critical to rebuilding trust. The next 48 hours will be pivotal as the community awaits the post-mortem report and further details on the recovery plan.

FAQs

Q1: How much was stolen in the TAC exploit?
The total stolen amount is approximately $2.8 million, comprising USDT, BLUM, and tsTON tokens.

Q2: Are my TAC tokens or other assets safe?
Yes. TAC confirmed that native TAC tokens and ERC-20 tokens bridged from TON and Ethereum were not affected by the exploit.

Q3: How will TAC compensate affected users?
The TAC foundation plans to sell its holdings of TAC tokens, following legal procedures, to fully compensate all users who lost funds in the incident.