Cybersecurity Risks in USDT Governance on TRON Highlighted by Hacken
- Compromising two signing keys could grant control over approximately $91.3 billion in USDT on the TRON network.
- The governance assessment revealed that critical operations have no time delays, allowing immediate execution of actions.
- Hacken identified that about half of the total USDT supply is concentrated on TRON, operating under a vulnerable multisignature arrangement.
- The same signing keys are reused across networks like Ethereum and Avalanche, increasing risk if three signers are compromised.
- There are no onchain limits on issuance volumes for audited minting paths, raising concerns about unchecked token creation.
Hacken’s analysis emphasizes vulnerabilities in the governance structure of USDT, particularly regarding administrative controls and key management across multiple networks. The absence of time delays or issuance limits poses significant risks to the stability of USDT’s value and security.
With around $91.3 billion at stake on TRON alone, these findings highlight critical areas for improvement in stablecoin governance frameworks to mitigate potential attacks and ensure operational integrity.
