Chainflip Halts Operations After TRON Exploit Drains 736,442 USDT

The incident unfolded over ninety minutes on September 12, as an attacker repeatedly leveraged a flaw in how Chainflip interprets TRON transaction memos. By attaching new memos to previously signed transactions, the perpetrator successfully tricked the protocol into issuing multiple payouts for single deposits. While the attacker executed eight attempts, six were successful, siphoning over 736,000 USDT from the protocol’s vaults. Chainflip developers discovered the vulnerability only after subsequent USDT transfers began to fail.

Chainflip officials confirmed the exploit was isolated to their TRON USDT integration and stated that all other assets remain secure. A pending swap valued at 115,654 USDT was interrupted by the shutdown, though the funds remain safely inside the protocol's vault and are slated for processing once the network returns to service. The team has already finalized a technical fix but insists that operations remain offline until at least Monday to ensure a secure restart.

While the protocol has promised to reimburse affected users, the specific mechanism for compensation remains under internal review. Developers are currently coordinating with relevant parties to track the stolen proceeds, though no official involvement from Tether or the TRON foundation has been confirmed. A comprehensive technical report detailing the breach is expected to follow the eventual network restoration.