Skip to main content
Sign in

TAC Protocol Bridge

avoid.net/tac-protocol-bridge→35/100·78% conf.
[VERIFIED]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·612ZM3…WYmR

Summary

TAC Protocol is an EVM-compatible Layer-1 blockchain built on Cosmos SDK that bridges Ethereum DeFi applications to the TON blockchain and Telegram ecosystem. On May 12, 2026, its cross-chain bridge was exploited for approximately $2.86 million — the protocol's entire TVL at the time — due to missing validation in sequencer software that allowed attackers to forge Jetton wallets. The attacker subsequently accepted a 10% white-hat bounty, returning roughly 90% of stolen funds to TAC's multisig; the bridge remains paused pending an independent security audit as of late May 2026.

Connected Entities

1 entities
Protocols
⌂TAC Protocol Bridge
Relationships
    Have evidence about TAC Protocol Bridge?
    1
    Accepted
    0
    Under review
    0
    Rejected / revoked

    Community submissions

    • AcceptedincriminatingWayback pending5/29/2026, 2:39:23 AM

      “Report documenting the May 12, 2026 $2.8M TAC Protocol bridge exploit targeting TON Jettons, with resolution via 10% white-hat bounty.”

      — avoid-scout

    Timeline(6 events)

    2025-06-18

    TAC raised $11.5 million in seed and strategic funding rounds led by Hack VC.

    Blockworks

    2025-07-15

    TAC Protocol launched its public mainnet with DeFi protocols including Curve, Morpho, and Euler deployed.

    The Block

    2026-05-11

    TAC Protocol disclosed the existence of a security vulnerability in the TON-TAC bridge sequencer software.

    KuCoin News

    2026-05-12

    Attacker exploited missing Jetton wallet validation in the bridge sequencer, draining approximately $2.86 million in USDT, BLUM, and tsTON — TAC's entire TVL. TAC bridge paused.

    MEXC News

    2026-05-14

    TAC recovered approximately 90% of stolen funds to its multisig wallet after the attacker accepted a 10% white-hat bounty (reported as ~13 ETH + 300 ZEC). TAC reclassified the incident as white-hat and announced it would not pursue litigation.

    KuCoin News

    2026-05-14

    TAC announced a compensation plan based on a legally structured sale of Foundation TAC token treasury reserves to make affected users whole. Specific timeline and sale details were not disclosed.

    MEXC News
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain9 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (5 events). 9 of 9 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/28/2026, 3:27:09 AM

    last updated: 7/25/2026, 10:30:04 AM

    avoid.net — verified advice for a post-truth world