← TON Blockchainreviewed 2026-09-07 · 38 claims checked
Fact-check findings
What an automated fact-checker found when it re-read TON Blockchain against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
4 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #18[disputed][awaiting moderator]in section: AngelX Drainer Toolkit Targeting TON (September 2024)
“the public launch occurred on August 31, 2024”
reviewerAngelX's public launch occurred on August 31, 2024.The section's own cited primary source (Blockaid) gives September 1, 2024 as the public-announcement date, while two secondary outlets (Invezz, Cryptometer) — likely both derivative of the same original wire item — say August 31. Since Blockaid is the first-party detector directly quoting the drainer's own Telegram announcement, its date is the more authoritative one, and the page's chosen date conflicts with its own cited primary source.Proposed correction (not yet applied)the public launch occurred on September 1, 2024 - #19[disputed][awaiting moderator]in the timeline
“2024-08-31”
reviewerTimeline entry: AngelX drainer toolkit publicly launched on 2024-08-31.Same underlying date discrepancy as the corresponding section-level claim: the timeline field stores 2024-08-31 (sourced to Invezz), while the section's own primary source (Blockaid) gives 2024-09-01. This field, not just the prose, should be corrected.Proposed correction (not yet applied)2024-09-01 - #27[disputed][awaiting moderator]in section: Illicit Marketplace Activity: Guarantee Markets in the Telegram/TON Ecosystem
“collectively, alongside successor markets, processed more than $35 billion in payments for scam infrastructure, stolen personal data, money-laundering services, and deepfake/face-swapping tools — making it, by Elliptic's assessment, the largest online market for illicit payments yet documented, larger than Silk Road and AlphaBay combined”
reviewerHuione Guarantee, alongside successor markets, collectively processed more than $35 billion in payments, making it larger than Silk Road and AlphaBay combined.The $35 billion figure and the Silk Road/AlphaBay comparison are real numbers from real reporting, but the page conflates two distinct facts: Huione's own volume (compared to Silk Road/AlphaBay) and the combined Huione+Xinbi figure (a contemporaneous competitor, not a 'successor market'). The specific cited source does not support either the $35B figure or the Silk Road/AlphaBay comparison as framed.Proposed correction (not yet applied)alone processed more than $31 billion in payments for scam infrastructure, stolen personal data, money-laundering services, and deepfake/face-swapping tools — making it, by Elliptic's assessment, the largest online market for illicit payments yet documented, more than 25 times larger than Silk Road and AlphaBay combined - #32[disputed][awaiting moderator]in section: Network Stability Incident: DOGS Airdrop Outage (August 2024)
“which reportedly distributed over $550 million in value to roughly four million Telegram-linked wallet users”
reviewerTON's block production halted for several hours following the DOGS airdrop, which reportedly distributed over $550 million in value to roughly four million Telegram-linked wallet users.None of the three sources cited for this section mention a $550 million distribution figure. $550 billion is DOGS' total token supply cap reported elsewhere, not a dollar value distributed in the airdrop; the $550 million figure appears to be an unsupported or fabricated conflation of that unrelated statistic.Proposed correction (not yet applied)which reportedly distributed DOGS tokens to roughly four million Telegram-linked wallet users
stale
1 claimThe claim was accurate when written but events since have overtaken it.
- #38[stale][awaiting moderator]in section: Official Bridge Infrastructure and Ethereum Contract Addresses
“though they remain available for asset withdrawal”
reviewerTON's early (2021-2023) official Ethereum/BNB Smart Chain bridges are now legacy infrastructure, not recommended for new transactions, could be deprecated at any time, but remain available for asset withdrawal.This was accurate when written but is now stale: as of the September 1, 2026 permanent shutdown (six days before this review), the legacy bridge described here no longer accepts withdrawals at all — it is not merely 'deprecated' with withdrawal still open, it is fully closed.Proposed correction (not yet applied)though the bridge was permanently shut down on September 1, 2026, after which any wrapped assets not withdrawn beforehand became inaccessible
link rot
2 claimsA cited source no longer resolves or no longer says what the page attributes to it.
- #35[link rot][awaiting moderator]in section: Structural Risk: Forensic Coverage Gaps and Traceability Limitations
“Multiple security researchers characterized TON's rapid 2024 growth — reported as a 4,500% increase in ecosystem total value locked during 2024 — as having outpaced the coverage of established blockchain-analytics and forensic tooling”
reviewerTON's ecosystem TVL grew by a reported 4,500% during 2024, outpacing forensic tooling coverage.The underlying factual claim (4,500%+ TVL growth alongside a phishing surge) is independently corroborated by a live source, but the specific citation used by the page (cryptodaily.co.uk / cryptointelligence.co.uk) is dead — it now serves only a generic homepage rather than the cited article.Proposed correction (not yet applied)https://cryptopotato.com/ton-ecosystem-faces-phishing-surge-amidst-4500-increase-in-tvl/ - #36[link rot][awaiting moderator]in the cited sources
“https://cryptodaily.co.uk/news-in-crypto/crypto-intelligence:ton-blockchain-faces-rising-phishing-threats-amid-explosive-2024-growth-experts-warn”
reviewersources_used entry citing cryptodaily.co.uk for the TON 2024 TVL/phishing growth claim.Duplicate occurrence of the same dead source in the page-level sources_used registry; fix alongside the sections[12].sources[1].url occurrence under the same defect_group.Proposed correction (not yet applied)https://cryptopotato.com/ton-ecosystem-faces-phishing-surge-amidst-4500-increase-in-tvl/
partially supported
2 claimsThe cited evidence supports part of the claim but not all of it.
- #22[partially supported][awaiting moderator]in section: Pyramid Scheme and Referral Bot Fraud (Kaspersky Investigation, 2023–2024)
“were induced to purchase 'boosts' — named tiers such as 'bicycle,' 'car,' 'train,' 'plane,' or 'rocket,' priced between 5 and 500 TON”
reviewerBoost tiers were named 'bicycle,' 'car,' 'train,' 'plane,' or 'rocket,' priced between 5 and 500 TON.The tier structure and price range are correct, but the lowest tier's name is misquoted ('bicycle' vs. the source's 'bike') — a minor mischaracterization of the cited source's own wording. - #31[partially supported][awaiting moderator]in section: Use by Pro-Russia Hacktivist Groups (KillNet)
“Researchers estimated that crypto wallets attributed to KillNet had accumulated more than $280,000 since February 2022, with the group reportedly converting a portion — around $35,000 — through Eastern European exchanges noted for weak know-your-customer controls.”
reviewerKillNet solicited donations in multiple cryptocurrencies including Toncoin, and its wallets accumulated more than $280,000 since February 2022, with about $35,000 converted through weak-KYC Eastern European exchanges.The Toncoin-donation claim itself is supported by the dedicated Analyst1 report, but the specific dollar figures in this sentence are drawn from a separate TRM Labs report that does not discuss Toncoin, creating a synthesis that implies more integration between the two data points than either source individually supports.
confirmed
29 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in the summary
“Separately, Telegram co-founder Pavel Durov faces an unresolved criminal investigation in France opened in 2024 and, since July 2026, an in-absentia terrorism-related charge in Russia; neither has resulted in a conviction.”
reviewerDurov faces an unresolved criminal investigation in France opened in 2024 and, since July 2026, an in-absentia terrorism-related charge in Russia; neither has resulted in a conviction.Corroborated by NBC News, Al Jazeera, Moscow Times and Bloomberg coverage of the July 29, 2026 FSB charge, consistent with the ongoing, unresolved French mise en examen. - #2[confirmed][no action needed]in section: Background and SEC Enforcement Action (2018–2020)
“Telegram Group Inc. and its subsidiary TON Issuer Inc. began raising capital in January 2018 to finance development of a blockchain then called the Telegram Open Network (TON) and an associated digital token called Gram.”
reviewerTelegram Group Inc. and TON Issuer Inc. began raising capital in January 2018 for the Telegram Open Network and Gram token.Matches SEC complaint and press materials. - #3[confirmed][no action needed]in section: Background and SEC Enforcement Action (2018–2020)
“The offering, conducted through private sales to 171 initial purchasers worldwide, raised more than $1.7 billion, including over $424 million from 39 U.S. purchasers.”
reviewerThe offering raised more than $1.7 billion from 171 initial purchasers worldwide.Both the aggregate figure and the US-purchaser subset figure are confirmed against SEC primary materials ($424.5M rounds to 'over $424 million'). - #4[confirmed][no action needed]in section: Background and SEC Enforcement Action (2018–2020)
“On October 11, 2019, the SEC filed an emergency action in the U.S. District Court for the Southern District of New York and obtained a temporary restraining order blocking distribution of Grams.”
reviewerSEC filed an emergency action on October 11, 2019 and obtained a TRO blocking distribution of Grams.Confirmed. - #5[confirmed][no action needed]in section: Background and SEC Enforcement Action (2018–2020)
“On March 24, 2020, Judge P. Kevin Castel granted the SEC a preliminary injunction, finding the agency had shown a substantial likelihood of success in proving Telegram's Gram sales violated federal securities law.”
reviewerOn March 24, 2020, Judge Castel granted the SEC a preliminary injunction.Confirmed against cited source. - #6[confirmed][no action needed]in section: Background and SEC Enforcement Action (2018–2020)
“On June 26, 2020, the SEC announced a settlement in which Telegram agreed to return more than $1.2 billion to investors and pay an $18.5 million civil penalty, without admitting or denying the SEC's findings.”
reviewerOn June 26, 2020, SEC announced settlement: Telegram to return over $1.2 billion and pay $18.5 million penalty.Confirmed, including standard 'without admitting or denying' language. - #7[confirmed][no action needed]in section: Recentralization Risk: Telegram Reasserts Control (May 2026)
“On May 4, 2026, Pavel Durov announced that Telegram would replace the community-run TON Foundation as the primary operator of TON and become the network's largest validator, under a roadmap referred to as MTONGA.”
reviewerOn May 4, 2026, Durov announced Telegram would replace the TON Foundation as primary operator and become the largest validator, under the MTONGA roadmap.Confirmed. - #8[confirmed][no action needed]in section: Recentralization Risk: Telegram Reasserts Control (May 2026)
“The announcement coincided with a sharp price rally: Toncoin traded between roughly $1.30 in late April 2026 and $2.39–$2.89 by late May 2026 following the news.”
reviewerToncoin traded between roughly $1.30 in late April 2026 and $2.39-$2.89 by late May 2026.Confirmed. - #9[confirmed][no action needed]in section: Recentralization Risk: Telegram Reasserts Control (May 2026)
“Analysts have framed the move as strengthening TON's product integration with Telegram's approximately 950 million users, but it also raises governance-concentration concerns for a chain marketed as decentralized”
reviewerTelegram has approximately 950 million users.Confirmed. - #10[confirmed][no action needed]in section: Pavel Durov Arrest and Criminal Charges in France (2024–Present)
“On August 24, 2024, Telegram co-founder and CEO Pavel Durov was arrested at Paris–Le Bourget Airport after arriving from Azerbaijan.”
reviewerDurov was arrested at Paris-Le Bourget Airport on August 24, 2024, after arriving from Azerbaijan.Confirmed. - #11[confirmed][no action needed]in section: Pavel Durov Arrest and Criminal Charges in France (2024–Present)
“On August 28, 2024, French prosecutors placed Durov under formal judicial investigation (mise en examen) on twelve counts, including alleged complicity in administering an online platform to facilitate illicit transactions by an organized group, and complicity in offenses including distribution of child sexual abuse material, drug trafficking, organized fraud, and provision of cryptographic services without required certification. He was released on bail of 5 million euros, barred from leaving France, and required to report to police twice weekly.”
reviewerOn August 28, 2024, Durov was placed under formal judicial investigation on twelve counts, released on €5 million bail, barred from leaving France, and required to report to police twice weekly.Confirmed across multiple contemporaneous outlets (NPR, France24, CNN, Axios, Cybernews). - #12[confirmed][no action needed]in section: Pavel Durov Arrest and Criminal Charges in France (2024–Present)
“Restrictions were eased progressively: an investigating judge permitted a temporary departure from France in March 2025, travel conditions were further loosened in July 2025, and on November 13, 2025, France fully lifted the travel ban after what reporting described as a year of compliance with judicial supervision.”
reviewerIn March 2025, an investigating judge permitted a temporary departure from France for Durov.All three dates (March 2025, July 2025, November 13, 2025) confirmed. - #13[confirmed][no action needed]in section: Pavel Durov Arrest and Criminal Charges in France (2024–Present)
“Separately, in July 2026, Russia's Federal Security Service (FSB) announced an in-absentia charge against Durov of complicity in facilitating terrorist activity, tied to allegations that Telegram failed to remove channels used by groups Russia characterizes as terrorist or extremist, and placed him on an international wanted list; Telegram publicly dismissed the Russian charge.”
reviewerIn July 2026, Russia's FSB charged Durov in absentia with complicity in facilitating terrorist activity and placed him on an international wanted list; Telegram dismissed the charge.Confirmed; independent reporting did not surface a specific Telegram statement text but multiple outlets note Telegram/Durov rejected Russian authorities' framing generally. - #14[confirmed][no action needed]in section: Phishing Campaigns and Wallet Drainer Activity (2024–2025)
“Security researchers reported that as anti-phishing defenses on Ethereum improved, wallet-draining operations increasingly shifted attention to TON, whose wallets and tooling were described as lacking the advanced security protections common on older chains.”
reviewerAs Ethereum anti-phishing defenses improved, wallet-draining operations shifted attention to TON.Confirmed. - #15[confirmed][no action needed]in section: Phishing Campaigns and Wallet Drainer Activity (2024–2025)
“one such scheme was reported to have netted a single operator at least 22,000 TON (roughly $152,000) via a fake 5,000-USDT promotion”
reviewerOne scheme netted a single operator at least 22,000 TON (roughly $152,000) via a fake 5,000-USDT promotion.Exact figures confirmed. - #16[confirmed][no action needed]in section: Phishing Campaigns and Wallet Drainer Activity (2024–2025)
“Industry-wide, wallet drainers across all chains were estimated to have stolen close to $494 million in 2024, a reported 67% year-over-year increase, according to blockchain security researchers”
reviewerWallet drainers across all chains stole close to $494 million in 2024, a 67% year-over-year increase.Confirmed, and the page correctly notes TON-specific losses are not separately broken out. - #17[confirmed][no action needed]in section: AngelX Drainer Toolkit Targeting TON (September 2024)
“Blockchain security firm Blockaid reported detecting an early test version on August 29, 2024”
reviewerBlockaid detected an early AngelX test version on August 29, 2024.Confirmed. - #20[confirmed][no action needed]in section: AngelX Drainer Toolkit Targeting TON (September 2024)
“within four days the toolkit had been used to deploy more than 300 malicious decentralized applications”
reviewerWithin four days of AngelX's launch, more than 300 malicious dApps had been deployed.Confirmed independent of the launch-date discrepancy noted above. - #21[confirmed][no action needed]in section: Pyramid Scheme and Referral Bot Fraud (Kaspersky Investigation, 2023–2024)
“Cybersecurity firm Kaspersky documented a Toncoin-denominated pyramid scheme operating on Telegram that it said had been active since November 2023.”
reviewerThe Kaspersky-documented Toncoin pyramid scheme has been active since November 2023.Confirmed. - #23[confirmed][no action needed]in section: Pyramid Scheme and Referral Bot Fraud (Kaspersky Investigation, 2023–2024)
“individual losses ranged from roughly $2 to $2,700”
reviewerIndividual losses in the pyramid scheme ranged from roughly $2 to $2,700.Confirmed. - #24[confirmed][no action needed]in section: Fake Stablecoin Fraud Targeting Major Exchanges
“malicious actors deployed a counterfeit USDT smart contract on TON engineered to mimic the metadata of Tether's official token, then used it to spam large volumes of fraudulent 'deposit' transactions at addresses associated with major exchanges including Binance, Bybit, MEXC, and Gate.io”
reviewerA counterfeit USDT contract on TON was used to spam fraudulent deposit transactions at addresses associated with Binance, Bybit, MEXC, and Gate.io.Confirmed. - #25[confirmed][no action needed]in section: Fake Stablecoin Fraud Targeting Major Exchanges
“a related variant involves scammers directing victims to send genuine USDT to attacker-controlled addresses disguised with exchange-like domain names (e.g., resembling 'bybit_usdt.ton'), sometimes returning a small profit on an initial small transfer to build trust before disappearing with a larger sum”
reviewerA related variant uses attacker-controlled addresses disguised with exchange-like domain names (e.g., resembling 'bybit_usdt.ton'), sometimes returning a small profit to build trust before disappearing with a larger sum.Confirmed against the official wallet-provider source cited. - #26[confirmed][no action needed]in section: Rug Pull Activity on TON Decentralized Exchanges
“The researchers reported that gradient-boosting models could identify likely rug pulls within the first five minutes of a token's trading, with the TVL-based detection method achieving an AUC of up to 0.891”
reviewerA 2025 ML study of Ston.fi and DeDust found gradient-boosting models can identify rug pulls within the first five minutes of trading, with TVL-based detection achieving AUC up to 0.891.Confirmed against the paper's own abstract. - #28[confirmed][no action needed]in section: Illicit Marketplace Activity: Guarantee Markets in the Telegram/TON Ecosystem
“most notably Tudou Guarantee, which reporting describes as having processed over $12 billion in transactions before effectively ceasing operations in January 2026, in the days following the arrest and extradition to China of Chen Zhi, chairman of Cambodia's Prince Holding Group, on January 6, 2026”
reviewerTudou Guarantee processed over $12 billion in transactions before ceasing operations in January 2026, days after Chen Zhi's arrest and extradition on January 6, 2026.Confirmed. - #29[confirmed][no action needed]in section: TON Blockchain as Malware Command-and-Control Infrastructure (2026)
“A variant of the TrickMo Android banking trojan, observed since January 2026 and targeting banking and cryptocurrency-wallet users in France, Italy, and Austria while disguised as TikTok or streaming apps, was reported to use TON .ADNL addresses routed through an embedded local TON proxy to receive operator commands”
reviewerA TrickMo Android banking trojan variant, observed since January 2026 and targeting France, Italy and Austria while disguised as TikTok/streaming apps, uses TON .ADNL addresses for C2.Confirmed; my first-pass fetch of the BleepingComputer article ambiguously suggested January 2024, but The Hacker News' more specific corroborating account and re-review of BleepingComputer's own text ('observing this version since January' in a May 2026 article) both support January-February 2026. - #30[confirmed][no action needed]in section: TON Blockchain as Malware Command-and-Control Infrastructure (2026)
“in late May 2026, Trend Micro reported a campaign dubbed 'TONResolver,' delivering a Node.js backdoor via malicious LNK files and abusing the TON blockchain to resolve C2 addresses, in emails sent to Japanese partner companies of Booking.com, with particular focus on the hotel industry”
reviewerIn late May 2026, Trend Micro reported 'TONResolver,' a Node.js backdoor delivered via malicious LNK files targeting Japanese partner companies of Booking.com in the hotel industry.Confirmed against primary source. - #33[confirmed][no action needed]in section: Network Stability Incident: DOGS Airdrop Outage (August 2024)
“According to the TON Foundation, four million users claimed their DOGS tokens on August 26, 2024, generating a claimed peak of over 67,000 transactions per second — far beyond the network's advertised throughput — which caused validators to fall out of consensus while struggling to process the backlog.”
reviewerFour million users claimed DOGS tokens on August 26, 2024, generating a peak of over 67,000 transactions per second.Confirmed against cited source, though other outlets report different claimant totals (e.g. 17 million across all claim channels) for different metrics — the page's specific 'four million... via the wallet' figure matches its cited source. - #34[confirmed][no action needed]in section: Network Stability Incident: DOGS Airdrop Outage (August 2024)
“TON Core instructed validators to restart at 4:00 a.m. UTC to re-establish consensus, and the TON Foundation announced full recovery at 5:30 a.m. UTC on August 28, 2024, stating on its social media account, 'TON is now producing blocks normally! We are back online.'”
reviewerTON Core instructed validators to restart at 4:00 a.m. UTC, and the TON Foundation announced full recovery at 5:30 a.m. UTC on August 28, 2024.Confirmed. - #37[confirmed][no action needed]in section: Structural Risk: Forensic Coverage Gaps and Traceability Limitations
“Blockchain intelligence firm TRM Labs announced in February 2025 that it had built out comprehensive analytics coverage for TON, including integration with the ChainAbuse reporting platform for real-time flagging of malicious TON addresses”
reviewerTRM Labs announced comprehensive blockchain intelligence coverage for TON in February 2025, including ChainAbuse integration.Confirmed.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.