ChainBleedv0.1 · open intel
← back to feed·ETHLOGIC2026-05-13 · 27d ago
Incident · SLOWMIST

TAC Cross-Chain Layer (TON Side)

Contract Vulnerability
Estimated loss
$2.80M
VERDICT —UNRATED
Verdict pending. Auto-ingested incidents are reviewed before a public verdict is rendered.
▰ METHOD
LOGIC
LOGICBYTECODE CATCHABLEAI SCANNABLE
Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

Following a security incident, TAC identified an exploit on the TON side of its cross-chain layer carried out by an external attacker. The incident resulted in a loss of approximately $2.8M across USDT, BLUM, and tsTON. The TAC token, TON, and all ERC-20 tokens bridged from Ethereum are NOT affected. The bridge remains paused while forensic analysis and remediation are ongoing. A post-mortem will be published soon. The team is working with law enforcement and security partners to trace funds and plans to make users whole via a structured sale of Foundation TAC token reserves. Attack method (per SlowMist): Contract Vulnerability. Reported loss: $ 2,800,000.

Primary source
https://x.com/TacBuild/status/2054620834879381870?s=20
Sourced from
slowmist
Technical record
chain
ethereum
protocol
TAC Cross-Chain Layer (TON Side)
bug_class
logic
date_occurred
2026-05-13
loss_usd
$2,800,000
source_id
sm:tac-cross-chain-layer-ton-side-::2026-05-13
Related — same bug class· logic
2026-05-13
27d ago
TRON
Transit Finance
Deprecated Smart Contract Exploit
logic
$1.88M
UNRATED
2026-05-13
27d ago
ETH
Transit Finance
Contract Vulnerability
logic
$1.88M
UNRATED
2026-05-12
28d ago
ARB
Aurellion
Uninitialized Proxy Exploit
logic
$456.0K
UNRATED
2026-05-12
28d ago
BSC
SQ Protocol
Acces Control Exploit
logic
$346.0K
UNRATED
2026-05-12
28d ago
BSC
SQ Protocol
Contract Vulnerability
logic
$346.1K
UNRATED
2026-05-11
29d ago
POLY
INK Finance
Whitelisted Address Impersonation
logic
$140.0K
UNRATED
ChainBleed — live web3 threat intelligence