Chainflip Loses $736K in TRON USDT Exploit

Chainflip, a financial protocol, has reported a loss of $736,442.17 after an attacker exploited its TRON USDT integration on September 12. The attack involved unauthorized payouts, with the attacker making six transactions before Chainflip halted operations temporarily.

The exploit took advantage of a weakness in how Chainflip handles TRON transaction memos. According to the protocol, the attacker added their own memo to a transaction that was already signed by validators, which was then interpreted as another swap instruction.

Chainflip reported the incident on September 13 and has paused its network while developers work on a fix. The team is also analyzing options for recovering or replacing the stolen funds.