TAC Says Cosmos EVM Shared-Module Flaw Drained Staking Pool; About $1M Sold Across Chains

TAC said an attacker exploited a vulnerability in the Cosmos EVM shared module, moving about 29.86 billion TAC—roughly 28.6% of total supply—out of the staking pool. The tokens were then bridged and sold in batches on BNB Chain and TON for approximately 1.0058 million USDT. TAC reported that around 1.662 billion TAC remains in the attacker's BNB Chain address. Another roughly 65.1 million TAC on the TAC chain has been frozen following a chain suspension. The team stressed the incident involved an unauthorized "transfer," not token issuance, so total supply is unchanged and the impact is limited to TAC tokens. TAC plans to restore staked balances via targeted state corrections. Tokens already sold into the market and deemed unrecoverable—about 1.258 billion TAC—will be fully covered by the TAC Foundation's treasury. Talks are ongoing over how to handle the assets still held by the attacker on BNB Chain. The cross-chain bridge remains suspended in both directions.