According to PANews, on May 21, TON network extension project TAC disclosed that approximately 90% of the $2.86 million in assets affected by the May 11 TON-TAC bridge security incident had been recovered by May 14. The vulnerability stemmed from a missing verification in the sequencer software; attackers deployed counterfeit Jetton wallets on TON, and the sequencer accepted the forged tokens without verifying the sender wallet's code hash. About 90% of assets were returned to TAC-controlled multi-signature addresses, with the remaining 10% retained by the attackers.
The cross-chain bridge remains suspended pending independent audits from auditors and TON partners. Operations will resume only after the fixed sequencer completes verification and the recovered assets plus TAC Foundation reserves fill remaining gaps. An exact timeline could not be provided due to multi-party coordination requirements. Users and the protocol face no financial loss.