TAC: Approximately 90% of the stolen assets have been recovered; the cross-chain bridge will resume operation after the audit is completed.

CoinFeed reported on May 21 that TAC, the TON network expansion project, disclosed a security incident that occurred on the TON-TAC asset bridge on May 11. Four days later, approximately 80% of the affected assets had been returned. TAC released a post-incident analysis report today detailing the incident. The vulnerability stemmed from a lack of verification in the sorting software: attackers deployed a fake Jetton wallet on TON, and the sorting software accepted the counterfeit tokens without verifying the sender's wallet's code hash. The total loss was approximately $2.86 million, involving USDT, BLUM, and tsTON. Following a public appeal, approximately 90% of the assets were returned to a multi-signature address controlled by TAC on May 14, with the remaining 10% retained by the attackers. The cross-chain bridge remains suspended, awaiting an independent review of the fixed sorting software by auditors and TON partners.