TAC blockchain remains frozen for over 10 days after a massive exploit forces a 1.26 billion token bailout
The TAC community halt continues at block 24,671,475, greater than 10 days after an exploit emptied the bonded staking pool. The community is an EVM-compatible Layer 1 linked to the TON ecosystem. An RPC query by CryptoSlate at 2:33 a.m. UTC nonetheless confirmed the ultimate block from Aug. 22, which means regular block manufacturing had not resumed.
The community’s Sept. 1 postmortem put the drain at 2,985,651,403.40 TAC, or 28.6% of provide. TAC mentioned one transaction decreased the bonded pool to zero with out altering whole token provide, leaving the chain’s delegation data with out the tokens that backed them.
The upstream Cosmos EVM advisory attributed the assault path to a mismatch between two stability data. The EVM StateDB tracked solely an account’s spendable tokens, whereas the Cosmos SDK ledger additionally tracked locked vesting tokens that might be delegated. Delegating greater than the spendable quantity induced an unchecked subtraction to wrap towards an infinite quantity near 2^256.
Cosmos Labs mentioned a second overflow operation then let an attacker zero a sufferer account whereas retaining its reliable tokens. TAC recognized the protocol-controlled staking pool because the sufferer account on its community. The advisory classed the flaw as important and mentioned Cosmos EVM variations beneath 0.6.2, plus variations 0.7.0 and 0.7.1, have been susceptible.
The disclosure path predates the assault. Cosmos Labs’ postmortem mentioned the bug reached its bounty program on April 25, was patched on the principle department May 15 and was backported into releases on Aug. 19. A Push Chain fork publicly described the trail on Aug. 20. TAC individually mentioned it despatched a maintainer an evaluation of two associated defects in July with out acknowledgement.
TAC community halt restoration leaves BNB Chain stability unresolved
TAC mentioned the attacker offered 1,208,329,197 TAC on BNB Chain for 950,293 USDT and one other 49.9 million TAC on TON for 55,481 USDT. The reported proceeds whole 1,005,774 USDT.
The proposed restoration splits the drained pool 3 ways. A focused state edit would take away 65,100,989 incident-linked TAC frozen on TAC. Another 1,662,322,353 TAC remains in incident-associated BNB Chain addresses and might be dealt with individually. TAC mentioned the remaining 1,258,228,061.40 TAC, representing tokens offered from the pool, would get replaced in full from TAC Foundation treasury reserves.
Unlike a rollback, the proposed edit would appropriate specified balances on the halt block with out rewinding the chain. TAC mentioned that might restore the bonded pool and delegator balances whereas preserving 7,772 reliable transactions from 218 unrelated addresses.
Ending the TAC community halt nonetheless depends upon validators adopting TAC’s patched binary, resuming block manufacturing and executing the edit. Bridging and redemption stay disabled, and TAC has not settled how the 1.662 billion TAC on BNB Chain might be handled. The treasury dedication subsequently addresses the sold-token shortfall, not the bigger attacker-held stability exterior the community.
The publish TAC blockchain remains frozen for over 10 days after a massive exploit forces a 1.26 billion token bailout appeared first on CryptoSlate.
