TAC: About 90% of the stolen assets have been recovered, operations will resume after cross-chain bridge audit is completed

According to ChainCatcher, the TON network scaling project TAC disclosed in a post that a security incident occurred on the TON-TAC asset bridge on May 11, and about 80% of the affected assets were returned four days later. Today, TAC released a post-incident analysis report detailing the events. The root cause of the vulnerability was the sequencer software lacking a validation: the attacker deployed a fake Jetton wallet on TON, and the sequencer accepted the counterfeit tokens because it failed to verify the code hash of the sender's wallet. The total loss was approximately $2.86 million, involving USDT, BLUM, and tsTON. Following a public appeal, about 90% of the assets were returned to a multi-signature address controlled by TAC on May 14, with the remaining 10% retained by the attacker.