Chainflip was attacked, 736,442 USDT was stolen, and recovery is expected around Monday

The cross-chain protocol Chainflip disclosed that an attack incident targeting Tron USDT occurred yesterday. It has been confirmed that 736,442.17 USDT was stolen through 6 unauthorized payments, and an additional 115,654.41 USDT from user exchanges remains in the vault due to payment failures, while other funds were unaffected.

Chainflip stated that the attacker exploited a vulnerability in the Tron transaction memo mechanism, attaching a custom memo to transactions that had already been signed by validators, causing the system to recognize the same deposit as a separate exchange and refund it again, ultimately leading to funds being paid out multiple times. The attacker executed 8 operations within approximately 90 minutes, gradually increasing the amounts. Chainflip claims to have completed a repair plan and has flagged the stolen funds to relevant authorities in an attempt to recover them, with operations expected to resume as early as Monday, and they will be responsible for compensating affected users for their losses.