Chainflip disclosed an attack targeting Tron USDT that resulted in 736,442.17 USDT being stolen through six unauthorized payments. Another 115,654.41 USDT tied to failed user swaps remained in the vault, while all other funds were unaffected. The attacker exploited a transaction memo (extra data attached to a blockchain transaction) flaw: custom memo data was added to validator-signed transactions, causing the system to treat one deposit as separate swaps and issue repeated refunds. Eight operations were carried out over about 90 minutes, with the amounts increasing over time. Chainflip said it has completed a fix, flagged the stolen funds with relevant institutions in an effort to recover them, expects to resume operations as early as Monday, and will cover affected users' losses.