{"id":13363,"date":"2026-09-17T08:21:39","date_gmt":"2026-09-17T08:21:39","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13363"},"modified":"2026-09-17T08:21:39","modified_gmt":"2026-09-17T08:21:39","slug":"chainflip-to-reset-tron-usdt-provider-balances-to-zero-following-736000-exploit","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13363","title":{"rendered":"Chainflip to reset TRON USDT provider balances to zero following $736,000 exploit"},"content":{"rendered":"

<\/p>\n

\n

Chainflip will set affected liquidity providers\u2019 active TRON USDT balances to zero under a restart plan responding to the 736,442.17 USDT exploit it disclosed on Sept. 12.<\/p>\n

The cross-chain swap protocol will first record each provider\u2019s pre-migration balance separately on-chain, preserving the amount Chainflip says it owes even though the active account will read zero. Repayment remains pending.<\/p>\n

By Sept. 16, Chainflip said swaps and quoting had resumed across the rest of the network while TRON remained excluded. The service restart leaves providers on the affected route waiting for both the accounting migration and a recovery process.<\/p>\n

Chainflip said the attacker removed the USDT from its TRON vault between 01:44 and 03:10 UTC on Sept. 12 by causing six liquidity-provider withdrawals to be paid twice.<\/p>\n

The attack exploited how the protocol read instructions attached to TRON transfers. Chainflip said the attacker submitted a transaction its validators had already signed and added a malformed memo. Software monitoring the transfer interpreted the memo as a failed swap and issued a refund on top of the ordinary withdrawal.<\/p>\n

The protocol said the TRON vault now holds far less USDT than providers are owed. The restart plan therefore separates the live account balance from the amount tracked for recovery.<\/p>\n