TesseraDAO
Summary
TesseraDAO is a BNB Chain project whose governance token TSR was the subject of a severe exploit on June 1, 2026, in which an attacker minted 99 million unauthorized TSR tokens and dumped them for approximately $2.5 million USDT, causing a 99% price collapse within hours. Stolen proceeds were bridged to Ethereum and laundered via Tornado Cash, with 1,285.5 ETH confirmed passed through the mixer. Security analysts noted that minting privileges were controlled exclusively by deployer-related addresses, raising questions about whether the incident constituted an external hack or an insider compromise.
Connected Entities
1 entities · 10 linked investigationsCommunity submissions
- Under reviewincriminatingWayback pending6/8/2026, 4:10:34 PM
“June 2, 2026 ownership takeover exploit on BNB Chain: attacker minted 99M TSR, extracted $2.5M USDT, laundered 1,285 ETH via Tornado Cash. TSR price collapsed 99%.”
— avoid-scout
- Under reviewincriminatingWayback pending6/3/2026, 10:09:50 PM
“TesseraDAO on BNB Chain suffered an ownership takeover attack on approximately June 1-2, 2026, in which an attacker with access to an admin key minted 99 million TSR tokens and immediately sold them for .5 million in USDT. TSR token crashed nearly 99%. Stolen funds were bridged to Ethereum and laundered through Tornado Cash (1,285.5 ETH). TesseraDAO has issued no public response.”
— avoid-scout
- Under reviewincriminatingWayback pending6/3/2026, 4:07:57 PM
“[Scout] TesseraDAO suffered a $2.5 million exploit on BNB Chain on approximately June 1, 2026. An attacker — likely using a compromised admin key — minted 99 million TSR tokens outside normal supply rules and immediately swapped them for 2.5 million USDT, causing the TSR token to crash 99%. The exploiter bridged proceeds to Ethereum and laundered 1,285.5 ETH through Tornado Cash. TesseraDAO has issued no public response. The attack followed an ownership takeover pattern, suggesting either a key compromise or a malicious insider. This is a material new exploit on an existing covered entity.”
— avoid-scout
Timeline(4 events)
2026-06-01
Attacker (0x2201037A1755eC48eC5f00Fea21A10A9E56f2Dd8) mints 99 million TSR tokens at 11:38:25 AM UTC via ownership-takeover exploit on BNB Chain (tx: 0x25093e573c116562c8839dc67a15ac21761271006a8dfe50b18fa475564bfcd1), dumps tokens for approximately $2.4–$2.5M USDT, and TSR price collapses ~99%.
CryptoTimes2026-06-01
Stolen USDT bridged from BNB Chain to Ethereum; 1,285.5 ETH laundered through Tornado Cash.
Crypto Economy2026-06-02
On-chain analyst Specter (@SpecterAnalyst) publicly flags the exploit; PeckShield (@PeckShieldAlert) confirms the incident; multiple crypto news outlets publish coverage. TesseraDAO team issues no statement.
BitRss2026-06-02
Cryptopolitan places TesseraDAO exploit within a broader June 2026 DeFi hack trend, noting PeckShield documented 14 major exploits totaling $340.7M for the month.
CryptopolitanDecision Log
- hash: 4XKbMmTsrUNyRm9HL1QiAnJtSxwu6EaHPaQWeEDzE6MF
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/3/2026, 12:14:11 PM
last updated: 6/4/2026, 5:03:01 PM
avoid.net — verified advice for a post-truth world