ChainCatcher 消息，TON 网络扩展项目 TAC 发文披露，5 月 11 日 TON-TAC 资产桥发生安全事件，四天后约 80% 的受影响资产已返还。TAC 今日发布事后分析报告详细披露了事件经过。漏洞根源在于排序器软件缺少一次验证：攻击者在 TON 上部署了伪造的 Jetton 钱包，排序器因未验证发送方钱包的代码哈希而接受了伪造代币。总损失约 286 万美元，涉及 USDT、BLUM 和 tsTON。公开呼吁后，约 90% 资产于 5 月 14 日返还至 TAC 控制的多签地址，剩余 10% 由攻击者保留。
跨链桥仍处于暂停状态，等待审计方和 TON 合作伙伴完成对修复后排序器软件的独立审查。跨链操作将在修复软件完成验证、且用追回资产和 TAC 基金会代币储备填补缺口后恢复。由于需多方协调，无法提供确切时间表。剩余资金缺口将由 TAC 基金会财库填补，用户和协议无财务损失。TAC 提醒用户，官方更新仅通过本账号和 Telegram 发布，任何未经请求的“恢复”或“支持”私信均为诈骗。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.