Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
TRX Chainflip announced the resumption of cross-chain redemption services (except Tron channels)
On September 12, Chainflip lost 736,442.17 USDT to its Tron vault due to a security breach. Subsequently, the agreement announced plans to restore cross-chain redemption services, but temporarily ruled out the Tron channel. This incident caused Tron Treasury to be unable to fulfill its obligations to liquidity providers, which directly affected the balances of relevant users.
Tron vault vulnerabilities and settlement measures
According to Chainflip's instructions, the attacker successfully extracted USDT from Tron vault by using the protocol to process transaction memoranda (memos). The attacker attached a memorandum to the withdrawal transaction (internal transfer) signed by the verifier, which Chainflip's witness layer mistakenly judged as a failed exchange transaction, and eventually issued an additional refund while the attacker's liquidity provider withdrawal was refunded.
To address this vulnerability, Chainflip released software version 2.2.13 on September 15. The new version of the agreement only accepts memoranda in standard TRX and TRC-20 transfers, effectively limiting future inbound transactions from smart contract wallets and aggregator contracts. Chainflip said there are currently no active integrations that rely on these restricted transaction formats.
Chainflip reset the balance of Tron's liquidity provider in response to the resulting funding gap. Upon restart, all open orders, strategies and borrowing positions related to Tron USDT will be closed. The provider's positions will be recorded into a separate smart contract balance for tracking, while the trxUSDT balance in the real-time account will be reset to zero.
Provider compensation and network restart
尽管欠付Tron流动性提供者的余额现在已被追踪，但Chainflip澄清，记录的数字并不代表即时赔偿。协议正在直接与受影响方合作以解决资金缺口，并表达了使提供者恢复原状的意愿，但尚未明确潜在补偿的来源、恢复时间表或追回部分丢失USDT的可能性。
由于Tron金库目前的USDT余额远低于LP应得金额，因此LP的余额需要重置。对于LP而言，您的trxUSDT账户余额现在显示为0，因为过去的持有量将在安排结算前单独追踪。
其他所有支持链上的运营将在重新推出后恢复，而Tron通道将保持非活跃状态，直到Chainflip的见证基础设施完全同步。协议报告称，Tron金库中仍有一笔价值115,654.41 USDT的用户兑换资金，待网络全面恢复正常运营后可申请领取。
安全背景与市场趋势
Chainflip在9月13日发布的一份详细报告中披露了此次事件，强调这是其首次发生导致金库资金重大损失的关键安全事件。它向用户保证，所有其他资金均不受影响且处于安全状态。
更广泛的去中心化金融领域正面临日益严峻的安全挑战，据Blockaid统计，今年上半年发生了创纪录的212起漏洞利用事件。随着区块链互操作性和资产管理领域的持续发展，传统投资者与加密原生投资者参与金融市场的方式正在发生重大转变。虽然许多DeFi协议采用了多重技术保障措施，但部分投资者开始转向代币化现实世界资产（RWA）平台。通过使用诸如1stepSwap等解决方案，个人可以直接在其加密钱包中持有美国领先公司的股份、黄金和白银，绕过中介并在几秒钟内自动完成价格发现。
Chainflip的事件强调了在行业适应不断演变的威胁和新形式的市场参与过程中，持续监控和主动升级协议安全性的重要性。
