TAC network remains halted more than 10 days after staking pool exploit

  • TAC network remains halted after an exploit emptied its bonded staking pool.
  • 2,985,651,403.40 TAC was drained, representing 28.6% of total supply.
  • TAC requires validator adoption of a patched binary before resuming block production.

The TAC network remains halted at block 24,671,475 after an exploit emptied its bonded staking pool. An RPC query by CryptoSlate at 2:33 a.m. UTC still showed Aug. 22 as the date of the final block, indicating that normal production had not resumed. TAC's Sept. 1 postmortem said the drain totaled 2,985,651,403.40 TAC, equal to 28.6% of supply, while total token supply itself was unchanged. The attack exploited inconsistent accounting between the EVM StateDB and the Cosmos SDK ledger, allowing delegated locked vesting tokens to trigger an unchecked subtraction overflow. Cosmos Labs classified the flaw as critical; vulnerable versions included Cosmos EVM releases below 0.6.2 and versions 0.7.0 and 0.7.1. TAC said the attacker sold TAC on BNB Chain and TON for a combined 1,005,774 USDT. The proposed recovery would use targeted balance edits and 1,258,228,061.40 TAC from TAC Foundation treasury reserves, while separately addressing 1,662,322,353 TAC in incident-linked BNB Chain addresses. The halt will end only after validators adopt TAC's patched binary, restart block production and execute the edit. Bridging and redemption remain disabled.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.