The TAC Protocol bridge connecting TON and Ethereum was drained of $2.8M due to a smart contract vulnerability.
TAC Protocol's cross-chain bridge, which connects The Open Network (TON) with Ethereum, suffered a smart contract exploit in May 2026. The attacker exploited a vulnerability in the bridge's locking and minting logic to withdraw assets without corresponding deposits on the opposite chain. The total loss is estimated at $2.8 million. The TAC team suspended bridge operations pending a security audit and contract upgrade.
Stolen assets were swapped on Ethereum DEXs and partially moved to TON via the same bridge before it was paused. Some funds were deposited into MEXC and KuCoin hot wallets, though no freeze orders have been publicly announced. The TAC team is coordinating with exchanges.