TAC Network
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·AYYmSx…tbQ2Summary
TAC Network (TON Application Chain) is a Cosmos-based EVM Layer 1 blockchain designed to bridge Ethereum-compatible decentralized applications to the TON and Telegram ecosystem. On August 22, 2026, the network suffered a critical exploit via a shared Cosmos EVM vesting-account vulnerability, resulting in the drainage of approximately 2.99 billion TAC tokens (28.6% of total supply) from the bonded staking pool. The TAC Foundation responded by halting the chain and subsequently migrating the entire BEP20 TAC token supply on BNB Chain to a new contract that deliberately excluded attacker-linked addresses — a supply rewrite that raised token integrity questions for existing holders.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Timeline(12 events)
9 July 2024
TAC announced integration with Polygon CDK and Agglayer to build a TON-connected EVM Layer 1.
CoinTelegraph25 April 2026
A researcher reported the Cosmos EVM vesting-account vulnerability to Cosmos Labs via its bug bounty program. Cosmos Labs initially assessed it posed no risk.
The Hacker News13 August 2026
Cosmos Labs confirmed internally that all Cosmos EVM chains — regardless of decimal configuration — were vulnerable to the vesting-account bug.
The Hacker News19 August 2026
Cosmos Labs released patched versions 0.6.2 and 0.7.2 via a silent patch process, without vulnerability-specific public disclosure.
crypto.news20 August 2026
MANTRA became the first known victim of the Cosmos EVM exploit, losing approximately 720.9 million tokens (~$3.6 million nominal) within approximately 12 hours of the patched release.
crypto.news22 August 2026
An attacker drained 2,985,651,403.40 TAC tokens (28.6% of total supply) from TAC's bonded staking pool using the Cosmos EVM vesting-account vulnerability. The attacker bridged stolen tokens to BNB Chain within 95 seconds.
Startup Fortune22 August 2026
TAC halted validator block production at block 24,671,475 at 23:58:11 UTC. KiiChain was also attacked on the same day, losing approximately 148 million KII tokens.
CryptoSlate25 August 2026
Cosmos Labs publicly urged all Cosmos EVM chains to halt operations due to the shared vulnerability. Up to six chains were ultimately affected with approximately $5.72 million in total stolen assets.
Yahoo Finance / BeInCrypto1 September 2026
TAC Foundation published a postmortem confirming the 2,985,651,403.40 TAC drain and announcing a three-part recovery plan, including a 1,258,228,061.40 TAC treasury bailout.
CryptoSlate2 September 2026
TAC Foundation took a snapshot of BNB Chain wallets at block 119,573,620 (17:16 UTC) as part of the BEP20 token migration plan, deliberately excluding attacker-linked addresses from the new contract.
Startup Fortune4 September 2026
TAC mainnet resumed block production from block 24,671,476. Trading of the new BEP20 TAC contract (0xb305E6954e4e0Cd021c06Ec355681abc8A00dbD7) went live on Binance Alpha at 08:00 UTC.
Startup FortuneDecision Log
- hash: C98e9LeqpMw35aj9P9ZpQcB8BFGvWcHV8ayzsvWNy7zB
This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/16/2026, 11:30:03 PM
last updated: 9/17/2026, 2:37:48 AM
avoid.net — verified advice for a post-truth world