buidles

Token Upgrade Update: Unsuccessful attack attempt on upgrade website. 🔒 During the final stage of our token upgrade process yesterday evening, our final audit detected irregular wallet address activity on the upgrade website. Firstly, to be clear: 1) No wallets, assets, or onchain activity was impacted. 2) There were no data leaks, and Trac Network is 100% unaffected as a result of the failed attempt. So What Happened? During the Trac address submission phase, a third-party script exploited a validation gap to inject a small number of unauthorized Trac Network addresses into the upgrade form on the website. This occurred only at the data entry layer, before any token mapping or distribution had taken place, and was promptly detected and contained. Why the Attack Failed: As a company, we (Trac Systems) pride ourselves upon always performing comprehensive sanitisation and plausibility checks at every stage of our processes. We also carefully monitor activity across our ecosystem (e.g., our Discord server) and take user reports from the community very seriously. As a result of our standard internal monitoring processes, the irregular Trac address submissions were detected and contained before they could have any impact. What this Means for Upgrade Process: While only a small percentage of Trac addresses were affected, the overall validity of the submitted addresses can no longer be fully trusted 100%. So in order to uphold the integrity of the upgrade process, we will conduct a complete resubmission and onboarding process from a clean slate, ensuring full security for all participants. Exchanges are already being informed, and are now on standby for the new $TNK Coin distribution date. Next Steps: 1) We are currently in the process of hardening the security of the Validator/Upgrade website by providing an additional, in-depth audit and fixes which will conclude by Wednesday, November 5th. 2) We will then begin the re-onboarding of all Trac Validators on Thursday, November 6th. 3) All $TRAC token upgraders will be required to re-submit their Trac Network addresses between November 6th-13th. 4) The $TNK distribution will take place on Thursday, November 14th. It is worth noting that since the process of staking BRC20 $TRAC for the upgrade was entirely unaffected, the October 31st deadline remains intact and will not be re-opened. To be clear, only the Trac Address submission phase of the upgrade process is to be reconducted, and will take place from November 6th-13th. In Closing: We appreciate the community’s patience and understanding as we take the necessary steps to further strengthen the upgrade infrastructure/website. Importantly, no assets, wallets, validators, onchain activity, or data were compromised at any point. The safeguards we designed worked as intended, identifying and isolating the issue before any impact could occur. Our team and community moderators remain available 24/7 to assist with any questions or concerns as we prepare to restart the upgrade process with enhanced security measures in place.