Transit Finance Suffers $1.88M Hack, Promises User Refunds

Transit Finance Suffers $1.88M Hack, Promises User Refunds

First seen 14 May 2026, 14:28 UTC MexcCryptopolitan 80% similarity 64.5

Article Content

Browse articles
ThreatCluster

Transit Finance experienced a hack that resulted in the theft of approximately $1.88 million from a deprecated smart contract. PeckShield identified the breach and traced the stolen funds to a specific Ethereum address. The attack exploited vulnerabilities in an early-version smart contract on the TRON network, which had been deprecated since 2022. Transit Finance has committed to refunding affected users and has set a 48-hour window for the attacker to respond regarding the return of the stolen assets. The protocol has stated that its current smart contract version remains secure and unaffected. This incident is part of a broader trend of DeFi attacks, with significant losses reported in recent weeks. In April alone, the DeFi sector lost over $609 million to cyberattacks, raising concerns about the security of cross-chain protocols. The total losses in 2026 are projected to reach $2.3 billion due to ongoing vulnerabilities.

Key Points: • Transit Finance lost $1.88 million due to a hack exploiting a deprecated smart contract. • PeckShield identified the stolen funds in a specific Ethereum address linked to the attack. • The incident is part of a larger trend of DeFi security breaches, with 2026 losses nearing $2.3 billion.

ThreatCluster AI

Timeline

2022-01-01
Smart contract deprecated
Transit Finance deprecated an early-version smart contract on the TRON network due to vulnerabilities.
Cryptopolitan
2026-05-12
Breach discovered
Transit Finance reported a hack that drained $1.88 million from its platform, identified by PeckShield.
Cryptopolitan
2026-05-14
Public announcement of hack
Transit Finance announced its commitment to refund affected users and set a 48-hour response window for the attacker.
Cryptopolitan
2026-05-14
PeckShield alerts public
PeckShield flagged the incident and traced the stolen funds to a specific Ethereum address.
Mexc

Community

Browse all →