Bridge entity

TAC Inner Bridge

TAC Inner Bridge is TAC's native lock-and-mint cross-chain framework connecting TON and TAC. It is included because its sequencer message-validation path was exploited in May 2026, causing unbacked minting on TAC and release of real locked assets on TON. TAC reported partial attacker-fund recovery and a Foundation backstop for the remaining shortfall, while the latest explicit reviewed first-party bridge state remained paused pending patched sequencer review and staged redeployment.

pausedreviewedcurrent

Bridge facts

Canonical name
TAC Inner Bridge
Type
Canonical Bridge
Status
Paused
Confidence
High
Primary chains
TON, TAC
Primary assets
USDT, BLUM, tsTON
Operator
TAC
Ecosystem
TAC
Launch date
Unknown
End date
Unknown
Terminal reason
Not applicable / unknown
Last reviewed
2026-08-11
Last verified
2026-08-11

Incident cases

  • TAC Inner Bridge 2026 jetton verification exploit2026-05-11

    On May 11, 2026, TAC's TON-to-TAC sequencer path accepted messages from a counterfeit TON jetton wallet because canonical wallet code-hash and expected-minter provenance were not verified. The attacker minted unbacked equivalents on TAC and bridged them back through the legitimate return path to release real locked USD₮, BLUM, and tsTON assets on TON. TAC reported approximately $2.854 million protocol loss, approximately $2.291 million final net recovery, a Foundation commitment to cover the remaining shortfall, and a continued bridge pause pending patched sequencer review.

    Exploitabout $2.85 millionUnresolved

Evidence records

Official URL status

Official URL recorded as live: https://tac.build/
Independent incident archive

Help maintain bridge history

Support incident linkage, lifecycle updates, evidence preservation, broken-link replacement, and corrections.

Support BIR
Record maintenance

Report a correction

Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.