chainflip.io Chainflip Network Paused After $736K Tron USDT Exploit
Article Content
- •Chainflip lost 736,442.17 USDT due to a memo manipulation exploit on its Tron integration.
- •The network is paused until at least September 14, 2026, while the team addresses the exploit.
- •Affected users will be compensated, and a pending swap of 115,654.41 USDT is recoverable.
Chainflip, a decentralized cross-chain swap protocol, halted its network after an attacker exploited its Tron settlement path, draining 736,442.17 USDT on September 12, 2026. This incident marks the first significant security event resulting in a loss of funds from Chainflip's vaults. The attacker manipulated the protocol by attaching a memo to a signed transaction, causing the system to issue duplicate refunds. Affected users will be compensated, with a pending swap of 115,654.41 USDT recoverable upon network restart. Chainflip has paused operations to address the exploit and is expected to remain offline until at least September 14, 2026. The team is analyzing compensation options and has flagged the exploited funds for recovery efforts. This incident highlights the vulnerabilities in the protocol's handling of swap instructions on the Tron network.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Arbitrum in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…