Update on the TAC CCL re-enablement.
The final patches at the sequencer level are being independently reviewed by our auditor and TON ecosystem partners. This work is in its final stage.
Restoration of the missing funds in USDT, BLUM, and tsTON is underway. Yesterday we completed three steps:
1) The assets recovered from the attacker were consolidated into USDT
2) USDT was moved to TON
3) BLUM held on the TAC side was burned as planned.
At this point, we need to settle the outstanding gap in BLUM and USDT, which we are currently working on. We expect the TAC CCL to re-open very soon. The full announcement will follow once everything is in place.
In the meantime, please rely only on this account and our official Telegram for updates. Any unsolicited "support" or "recovery" DMs should be treated as scams.
Thank you for your support, patience, and trust throughout this process.
On May, 11th a security incident affected TON-TAC asset bridge. Over the past few days, TAC team has been engaged in post incident efforts, which, four days after, have resulted in the return of approximately 80% of the affected assets.
Today, we are publishing the official post-mortem report detailing everything that happened behind the scenes of the incident.
The root reason traced to a single missing validation in our sequencer software: the responsible party deployed a counterfeit jetton wallet on TON, and the sequencer accepted the counterfeit tokens because it did not verify the sender wallet's code hash. The total loss was approximately $2.86M across USDT, BLUM, and tsTON.
Following a public appeal and subsequent recovery efforts, the assets under the responsible party's control were successfully secured, with approximately 90% returned to TAC-controlled multisigs on May 14th and the remaining 10% retained by the responsible party.
The bridge remains paused while the patched sequencer software is independently reviewed by our auditor and TON partners. We understand the urgency - affected users and integrated projects want the bridge back, and so do we. At the same time, security comes before speed.
Cross-chain operations will only resume once the fixed software has been fully verified and the imbalance has been closed using the recovered assets and the TAC Foundation's token reserve. Both steps take time due to coordination with multiple entities, and we are unable to provide precise timelines at this stage due to external dependencies. When operations resume, the change will be transparent to users with no action required from their side.
The remaining gap will be covered by the TAC Foundation treasury, ensuring zero financial impact on users or the protocol. Official updates are only posted through this account and our Telegram; any unsolicited "recovery" or «support» DMs are scams.
Thank you to the @ton_blockchain community and the broader TON and EVM ecosystems for their support.
We're happy to announce that ~90% of the funds from the May 12th security incident have been recovered.
The attacker decided to return the funds that were sitting across Ethereum, TON, TAC, BSC and Zcash, and retained the 10% as a bounty.
We are happy to confirm that the unbalance on the cross-chain layer will be completely fixed.
A detailed update and full post-mortem will follow in the coming days.
Big thanks to @SEAL_911, our security partners, the @ton_blockchain community and to every partner team that stood with us.
We, the TAC team, based on coordinated discussions with our security partners and law enforcement, formally assert that upon successful return of the funds to the TAC team multisig at 0xa05CBfF7b395DeA456539Db279AbC6EE5a8150f9 and EQAkTfPo4zo72Zyr5dk1QrWvCWlgA0gRd3njyg5hqmwdrVcN and t1dXd2EUAe34BYEtNUtNfrBFQTTs8LhoTUH:
1. Legal action will not be taken against the operator of the address(es) eth/bsc:0x46FB375EAc7a44C231b2b7aB762040ee74908CDc, zec:t1h6NcBAciYGdaVb4Ej1AELTx1D9UF9WUDr and ton:EQBPHhXyG_vbsAEnB6YccNhhaVc6I3ixOCc7vriaOzo4AFA8.
The entity controlling the above address(es) carried out the incident affecting the TAC cross-chain layer in multiple transactions, resulting in the movement of approximately $2.8M in USDT, BLUM, and tsTON. Any further investigations or legal matters against the entity, in relation to this incident, will end.
2. We view this occurrence as a white-hat rescue, and as a result: eth:0x46FB375EAc7a44C231b2b7aB762040ee74908CDc and zec:t1h6NcBAciYGdaVb4Ej1AELTx1D9UF9WUDr will be rewarded with 10% of the recovered fund as a white-hat bounty from the TAC team, which translates to approximately 13 ETH + 300ZEC.
3. The remaining balance, will be directed to the TAC team multisigs mentioned above.
Following the security incident, we identified an exploit on the TON side of the TAC crosschain layer that was carried out by an external attacker. The incident resulted in a loss of approximately $2.8M across USDT, BLUM, and tsTON.
The TAC token, TON and all ERC-20 tokens bridged from Ethereum are NOT affected.
The bridge remains paused while forensic analysis and remediation work are ongoing. A post-mortem with additional disclosure will be published in the next 48 hours.
We are actively working with law enforcement, SEAL 911, and our security partners to trace and block the stolen funds.
Our focus is on making users whole and fully restoring bridge liquidity through a legally structured sale of Foundation’s TAC token treasury reserves.
We will continue to share updates through our official channels. Thank you for your patience and trust.
We are currently investigating a security incident affecting the TAC bridge with TON.
The bridge has been paused as soon as we received reports from our security partners.
The issue appears isolated to native TON Jettons bridged from TON (excluding $TON). $TON and every other Ethereum native asset are not affected.
TON cross-chain transactions remain paused while the investigation is ongoing.
Protecting our users is our top priority. Should any users be affected as a result of this incident, we are committed to doing everything we can to make them whole.
We will be sharing regular updates through our official channels.
A great dive from @LucidlyFi on how we’re working with @RealAcidLabs to test and implement a completely new monetisation tool for Telegram Mini Apps, powered by institutional-grade DeFi strategies right on @ton_blockchain
TAC is on fire, literally 🔥
On May 7th, TAC Foundation will burn the Q1/26 staking rewards: 29,608,564.20 $TAC 🔥
This is part of the quarterly process where staking rewards from locked early contributors and investors are burned for fairness to the community and to strengthen scarcity dynamics and align token structure with long-term ecosystem growth.
To date, 235,126,963.98 $TAC has already been burned, since mainnet launch, among unclaimed incentives and staking rewards. And we'll keep going.
We’ll publish burn transaction on May 7th, stay tuned.
GTAC!
@TohaBuild pls, join our telegram channel - https://t.co/2Nv13UAzqI and send all the details to "Support" topic
we will urgently help you right there sir!
TAC is on fire, literally 🔥
On May 7th, TAC Foundation will burn the Q1/26 staking rewards: 29,608,564.20 $TAC 🔥
This is part of the quarterly process where staking rewards from locked early contributors and investors are burned for fairness to the community and to strengthen scarcity dynamics and align token structure with long-term ecosystem growth.
To date, 235,126,963.98 $TAC has already been burned, since mainnet launch, among unclaimed incentives and staking rewards. And we'll keep going.
We’ll publish burn transaction on May 7th, stay tuned.
GTAC!