TAC Report Reveals Cosmos EVM Vulnerability Attackers Cashed Out Approximately $1 Million

TAC released a security incident review report on August 22, stating that this incident was a "transfer" rather than an "issuance," with the total supply remaining unchanged and only the TAC token being affected. The recovery plan will restore the staking balance through targeted state corrections, and the portion that has already entered the market and cannot be recovered on-chain (approximately 1.258 billion tokens) will be fully covered by the TAC Foundation's treasury. The disposal plan for the remaining assets held by the attackers on the BNB Chain is still under negotiation and will be announced separately. Currently, the cross-chain bridge between BNB Chain and TAC remains bi-directionally paused. The attackers exploited a vulnerability in the Cosmos EVM shared module to transfer 2,985,651,403.40 TAC tokens (approximately 28.6% of the total supply) from the staking pool, which were then bridged to BNB Chain and TON for phased liquidation. The attackers cashed out a total of approximately 1,005,800 USDT, with around 1.662 billion tokens still held in the attackers' address on the BNB Chain, and about 65.1 million tokens frozen on the TAC chain due to the chain pause.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.