Hacken finds ~$91B of Tron-based USDT controlled by 2-of-3 multisig without rollback protections

Hacken's assessment, reported by CoinDesk, found that approximately $91 billion — nearly half of USDT's circulating supply — of Tron-based USDT is controlled by a 2-of-3 multisig mechanism lacking built-in delay, revocation window, or rollback capabilities. If an attacker obtained two signing keys, they could change the contract owner and execute administrative operations such as minting, freezing addresses, or pausing transfers.

Detected & updated continuously · Source: Nebula