Telcoin Suffers Apparent $1.2M Exploit Related to Wallet Implementation on Polygon; TEL Drops 40%

Affected user balances will be restored as no private keys were stolen in the exploit, the developers said.

AccessTimeIconDec 26, 2023 at 10:30 a.m. UTC
Updated Mar 9, 2024 at 1:49 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

The Telcoin (TEL) token price fell 40% in the past 24 hours after an apparent error relating to a wallet implementation on Polygon caused user balances to drop on the Telcoin mobile application. The slide was flagged as an exploit by blockchain security company Peckshield.

The exploiter managed to make over $1.2 million in funds drained from affected accounts, according to messages on Telcoin's community on the Discord online forum. However, these were only from users who had "never initiated transactions" from the Telcoin application, the company said.

Telcoin, which develops financial applications, such as trading and remittance tools, based on the Polygon blockchain for mobile-device users, froze its application in early Asian hours on Tuesday, developers said in an X post. In a follow-up post, they said the issue was related to how the application interacted with the Polygon blockchain and that no private keys or sensitive data were leaked.

“We’ve identified the root cause, which was not an issue with the Telcoin Wallet code itself, but with the proxy implementation of the wallet on Polygon – primarily impacting wallets that have never initiated transactions,” Telcoin posted on X . “We have deployed a fix to stop further exploitation.”

The team said it planned to restore all wallets to their previous balances prior to turning the application service back on.

UPDATE (Dec. 26, 10:44 UTC): Adds drained funds in second paragraph.

UPDATE (Dec. 26, 15:27 UTC): Rewrites headline, first paragraph to clarify the wallet is a Telcoin wallet implemented on Polygon

Edited by Sheldon Reback.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Shaurya Malwa

Shaurya is the Deputy Managing Editor for the Data & Tokens team, focusing on decentralized finance, markets, on-chain data, and governance across all major and minor blockchains.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.