The TON-TAC bridge lacked code-hash verification on jetton wallets. An attacker deployed a counterfeit USD₮ wallet and sent a fraudulent bridge message to receive unbacked minted TAC tokens, draining legitimate locked assets.