Chainflip Loses $736K After TRON Exploit

Chainflip suffered a significant loss after an exploit took advantage of a vulnerability in its TRON USDT transaction processing. The attacker triggered six unauthorized withdrawals, totaling $736,442.17 in USDT over a period of about 90 minutes.

The hack occurred when the attacker added their own memo to a transaction that had already been processed by validators' signatures. Chainflip's system did not recognize this as a duplicate deposit and instead processed it as a new swap request.

The attacker attempted the exploit eight times, escalating the amounts used each time. The team at Chainflip has halted its network operations while they work on a technical fix to prevent similar incidents in the future.

A small amount of $115,654.41 USDT remains locked in the vault, but this was not affected by the hack and will be processed when the network is safely restarted.