TAC Network Halted After 28.6% Staking Pool Drain
TAC chain remains frozen since August 22 following an exploit that emptied the bonded staking pool; treasury replacement proposed for sold tokens while BNB Chain holdings unresolved.
The TAC network has remained halted at block 24,671,475 since August 22, more than ten days after an exploit emptied the bonded staking pool. An RPC query still returns only that final block, confirming no resumption of production.
Exploit Details
A single transaction drained 2,985,651,403.40 TAC, equal to 28.6 percent of supply, from the bonded pool. The attack exploited a mismatch between EVM StateDB spendable balances and Cosmos SDK delegation records, allowing an unchecked subtraction to wrap and zero the victim account.
Attacker Sales
The attacker sold 1,208,329,197 TAC on BNB Chain for 950,293 USDT and 49.9 million TAC on TON for 55,481 USDT, for total proceeds of 1,005,774 USDT. The remaining 1,662,322,353 TAC associated with the incident sits in BNB Chain addresses.
Recovery Plan
The proposed recovery uses a targeted state edit at the halt block to remove 65,100,989 incident-linked TAC on the TAC chain. The 1,258,228,061.40 TAC sold from the pool would be replaced from TAC Foundation treasury reserves. The edit would restore bonded pool and delegator balances while preserving 7,772 unrelated transactions from 218 addresses.
Remaining Unknowns
Validator adoption of the patched binary, resumption of block production, and execution of the edit are still pending. Bridging and redemption remain disabled. Treatment of the 1.66 billion attacker-held TAC on BNB Chain has not been settled.