Morpho is going Hybrid with the TAC testnet🦋🫰✨

Yes, you heard that right! 

TAC is bringing Ethereum's #2 largest lending protocol to TON 🏆 💎

Powered by TAC, Morpho will debut on TON with its Telegram Mini App, reaching 1B+ users. 

1 in 8 people on earth will soon have access to bluechip DeFi from their pockets! 🔥

Telegram-powered DeFi is here 📱

https://x.com/TacBuild/status/1904896149959696467

The Summoning: fueling the next wave of Telegram-powered DeFi.

https://x.com/TacBuild/status/1906791029581484397

GTAC 🫰

We just released a detailed article outlining our roadmap for 2025: https://x.com/TacBuild/status/1912480693398946129

Please give it a read and help us spread the TAC vision across socials.

GTAC 🫰

Quick PR milestone: we’ve breached $150M in The Summoning campaign on Turtle Club!

https://x.com/DefiantNews/status/1912962214191120772

Please engage and amplify!

GTAC 🫰

https://x.com/TacBuild/status/1915140214751916057

Excited to announce $200M in the Summoning

Please engage!

GTAC

The TAC TEAM is live on Discord for the community AMA, tune in: https://discord.com/channels/1313636846852640870/1345287656610992158

Tune in to our space with Cosmos: https://x.com/i/spaces/1lDxLzXreZqGm

We are currently investigating a security incident affecting the TAC bridge with TON.

The bridge has been paused as soon as we received reports from our security partners.

The issue appears isolated to native TON Jettons bridged from TON (excluding $TON). $TON and every other Ethereum native asset are not affected.

TON cross-chain transactions remain paused while the investigation is ongoing.

Protecting our users is our top priority. Should any users be affected as a result of this incident, we are committed to doing everything we can to make them whole.

We will be sharing regular updates through our official channels.

Following the security incident, we identified an exploit on the TON side of the TAC crosschain layer that was carried out by an external attacker. The incident resulted in a loss of approximately $2.8M across USDT, BLUM, and tsTON.

The TAC token, TON and all ERC-20 tokens bridged from Ethereum are NOT affected.

The bridge remains paused while forensic analysis and remediation work are ongoing. A post-mortem with additional disclosure will be published in the next 48 hours.

We are actively working with law enforcement, SEAL 911, and our security partners to trace and block the stolen funds.

Our focus is on making users whole and fully restoring bridge liquidity through a legally structured sale of Foundation’s TAC token treasury reserves.

We will continue to share updates through our official channels. Thank you for your patience and trust.

Hello everyone!

We're happy to announce that ~90% of the funds from the May 12th security incident have been recovered.

The attacker decided to return the funds that were sitting across Ethereum, TON, TAC, BSC and Zcash, and retained the 10% as a bounty.

We are happy to confirm that the unbalance on the cross-chain layer will be completely fixed.

A detailed update and full post-mortem will follow in the coming days.

Big thanks to SEAL911 our security partners, the TON community and to every partner team that stood with us.

Multisigs under TAC control with received funds:

ETH/BSC/TAC → https://etherscan.io/address/0xa05CBfF7b395DeA456539Db279AbC6EE5a8150f9#tokentxns
TON → https://tonviewer.com/EQAkTfPo4zo72Zyr5dk1QrWvCWlgA0gRd3njyg5hqmwdrVcN
ZEC → https://blockchair.com/zcash/address/t1dXd2EUAe34BYEtNUtNfrBFQTTs8LhoTUH

On May, 11th a security incident affected TON-TAC asset bridge. Over the past few days, TAC team has been engaged in post incident efforts, which, four days after, have resulted in the return of approximately 80% of the affected assets.

Today, we are publishing the official post-mortem report detailing everything that happened behind the scenes of the incident.

The root reason traced to a single missing validation in our sequencer software: the responsible party deployed a counterfeit jetton wallet on TON, and the sequencer accepted the counterfeit tokens because it did not verify the sender wallet's code hash. The total loss was approximately $2.86M across USDT, BLUM, and tsTON.

Following a public appeal and subsequent recovery efforts, the assets under the responsible party's control were successfully secured, with approximately 90% returned to TAC-controlled multisigs on May 14th and the remaining 10% retained by the responsible party.

The bridge remains paused while the patched sequencer software is independently reviewed by our auditor and TON partners. We understand the urgency - affected users and integrated projects want the bridge back, and so do we. At the same time, security comes before speed.

Cross-chain operations will only resume once the fixed software has been fully verified and the imbalance has been closed using the recovered assets and the TAC Foundation's token reserve. Both steps take time due to coordination with multiple entities, and we are unable to provide precise timelines at this stage due to external dependencies. When operations resume, the change will be transparent to users with no action required from their side.

The remaining gap will be covered by the TAC Foundation treasury, ensuring zero financial impact on users or the protocol. Official updates are only posted through this account and our Telegram; any unsolicited "recovery" or "support" DMs are scams.

Thank you to the TON community and the broader TON and EVM ecosystems for their support.

Read the full post-mortem: https://tac.build/blog/post-mortem-report-tac-bridge