Chainflip TRON USDT Exploit (September 2026)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·538pSX…3XzhSummary
On September 12, 2026, an attacker exploited a memo-parsing vulnerability in Chainflip's TRON USDT settlement layer, draining 736,442.17 USDT across six unauthorized payouts in approximately 90 minutes. Chainflip halted all network operations, patched the vulnerability via software version 2.2.13, and restarted most routes by September 15–16 with TRON excluded. As of late September 2026, liquidity provider balances on the affected route have been zeroed and claims recorded separately on-chain, but no funding source, repayment schedule, or confirmed reimbursement has been publicly disclosed.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(7 events)
12 September 2026
Attacker exploited TRON memo-parsing vulnerability across eight rounds over approximately 90 minutes, producing six unauthorized payouts totaling 736,442.17 USDT from Chainflip's TRON vault.
Chainflip official incident report12 September 2026
Chainflip halted all network swaps, deposits, and withdrawals after detecting the exploit. Stolen funds were flagged with relevant parties for tracking.
Chainflip official incident report13 September 2026
Chainflip publicly disclosed the exploit, confirmed the 736,442.17 USDT loss, and pledged to make affected users whole. The team described the incident as its first significant critical vault loss.
CryptoTimes15 September 2026
Chainflip released software version 2.2.13, patching the TRON vault swap restriction and implementing LP balance snapshots. Network restart commenced with TRON excluded.
GitHub release 2.2.13 / Unchained15 September 2026
Affected liquidity provider trxUSDT balances were reset to zero, with pre-migration amounts recorded in a separate on-chain ledger tracking claims owed.
CryptoSlate16 September 2026
Most Chainflip swap routes restarted. TRON USDT route remained offline with no confirmed reinstatement date.
Phemex News17 September 2026
Reporting confirmed no funding source, payment schedule, or reimbursement completions had been publicly disclosed by Chainflip for affected liquidity providers or users.
Phemex NewsDecision Log
- hash: 6jEq8oRvjZ3txJtwRG3YCkn6GaqhFLEVJ6j2M9SFsbrn
This investigation is cryptographically anchored to the Solana blockchain (1 event). 3 of 9 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/24/2026, 5:03:42 PM
last updated: 9/24/2026, 5:19:03 PM
avoid.net — verified advice for a post-truth world