TAC: Cosmos EVM Vulnerability Exploited, $1M Stolen in Attack

iconChainthink
Share
This is the logo of the coin.
TAC
$0.00154-5.52%
This is the logo of the coin.
USDT
----
This is the logo of the coin.
ATOM
$1.68-2.28%
AI summary iconSummary
According to on-chain data from Chainthink, attackers exploited a vulnerability in the Cosmos EVM shared module to transfer approximately 2.986 billion TAC tokens from staking pools. The stolen tokens were bridged to BNB Chain and TON and sold for roughly 1.0058 million USDT. On-chain analysis shows that 1.662 billion TAC remain in the attacker’s BNB Chain address, while 65.1 million TAC are frozen on the TAC Chain. TAC referred to the event as a "transfer," not an "inflation," and the TAC Foundation stated it will cover losses for the 1.258 billion TAC that entered the market. Cross-chain bridges have been paused as discussions for a resolution continue.

According to the official TAC announcement, the attacker exploited a vulnerability in the Cosmos EVM shared module to transfer approximately 29.86 billion TAC (28.6% of the total supply) from the staking pool, then bridged and sold them in batches on BNB Chain and TON, totaling approximately 1.0058 million USDT.

Currently, approximately 1.662 billion TAC remain in the attacker’s address on BNB Chain, and about 65.1 million TAC are frozen on the TAC chain due to the chain suspension.

TAC indicates that this event was a "transfer," not an issuance, meaning the total supply remains unchanged and only TAC tokens are affected.

The recovery plan will restore staked balances through targeted state corrections; the portion that has already entered the market and cannot be recovered (approximately 1.258 billion tokens) will be fully covered by the TAC Foundation treasury.

The disposal plan for assets still held by the attacker on BNB Chain is under negotiation, and the cross-chain bridge remains suspended in both directions.

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.