Skip to main content
AVOID.NET

TAC Protocol Bridge

avoid.net/tac-protocol-bridge→35/100·78% conf.
[✓ FACT-CHECKED]· reviewed 2 times · last review 30 May 2026

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·612ZM3…WYmR
last updated 2026-05-28

Summary

TAC Protocol is an EVM-compatible Layer-1 blockchain built on Cosmos SDK that bridges Ethereum DeFi applications to the TON blockchain and Telegram ecosystem. On May 12, 2026, its cross-chain bridge was exploited for approximately $2.86 million — the protocol's entire TVL at the time — due to missing validation in sequencer software that allowed attackers to forge Jetton wallets. The attacker subsequently accepted a 10% white-hat bounty, returning roughly 90% of stolen funds to TAC's multisig; the bridge remains paused pending an independent security audit as of late May 2026.

Connected Entities

3 entities · 60 linked investigations
Organizations
□Cosmos (ATOM)□Ethereum90
Protocols
⌂TAC Protocol Bridge
Relationships
  • Cosmos (ATOM)→mentioned with→Ethereum(65%)
  • TAC Protocol Bridge→mentioned with→Cosmos (ATOM)(65%)
  • TAC Protocol Bridge→mentioned with→Ethereum(80%)
Have evidence about TAC Protocol Bridge?
1
Accepted
3
Under review
0
Rejected / revoked

Community submissions

  • Acceptedincriminating[WAYBACK]5/29/2026, 2:39:23 AMReport

    “Report documenting the May 12, 2026 $2.8M TAC Protocol bridge exploit targeting TON Jettons, with resolution via 10% white-hat bounty.”

    — avoid-scout(unverified)

3 submissions awaiting moderator review.

Timeline(6 events)

18 June 2025

TAC raised $11.5 million in seed and strategic funding rounds led by Hack VC.

Blockworks

15 July 2025

TAC Protocol launched its public mainnet with DeFi protocols including Curve, Morpho, and Euler deployed.

The Block

11 May 2026

TAC Protocol disclosed the existence of a security vulnerability in the TON-TAC bridge sequencer software.

KuCoin News

12 May 2026

Attacker exploited missing Jetton wallet validation in the bridge sequencer, draining approximately $2.86 million in USDT, BLUM, and tsTON — TAC's entire TVL. TAC bridge paused.

MEXC News

14 May 2026

TAC recovered approximately 90% of stolen funds to its multisig wallet after the attacker accepted a 10% white-hat bounty (reported as ~13 ETH + 300 ZEC). TAC reclassified the incident as white-hat and announced it would not pursue litigation.

KuCoin News

14 May 2026

TAC announced a compensation plan based on a legally structured sale of Foundation TAC token treasury reserves to make affected users whole. Specific timeline and sale details were not disclosed.

MEXC News
Provenance & Audit Trail

Decision Log

  • #6reviewRecorded on Solana ✓9/9/2026, 3:04:47 AM
    slot 445504359 · hash 5Y1VqfrJkx4Dn1f8Fqi8RT9Qos3hKzMXPXT9gCBMbf7F
  • #5review approveRecorded on Solana ✓5/30/2026, 7:50:37 PM
    slot 423223281 · hash 3fdrteEiVuSGwirLQH9yeV6tLAjrEv873awAzJdiC9pT
  • #4reviewRecorded on Solana ✓5/30/2026, 7:50:37 PM
    slot 423223278 · hash GneNGem39JN5BAC1ydxD9SrjSXF5cg459TKyXKhM1uzs
  • #3review approve-3Recorded on Solana ✓5/30/2026, 12:10:21 PM
    slot 423153675 · hash ECqdMVr5B2q1Q3qy9AAThsG7fQjWQevxuFV3Yvdggu73
  • #2reviewRecorded on Solana ✓5/30/2026, 12:10:21 PM
    slot 423153670 · hash 8xyz7w33DLUUSbU4Y73R4ZYxQk3eqsRVCxWooL1Cfhi4
  • #1publishRecorded on Solana ✓5/28/2026, 3:28:14 AM
    slot 422638384 · hash GF2f7nRX3gJNLqe1AFkmUnNPwWPA9S4As3G7ZrWMXPA8

This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 9 of 9 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-09-0728 claims checked13 corrections pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 5/28/2026, 3:27:09 AM

last updated: 5/28/2026, 3:27:09 AM

5 views

avoid.net — verified advice for a post-truth world