Hacken warns 2 Tron signing keys could expose $91.3B in USDT

An attacker could gain control over about $91.3 billion worth of USDT on the Tron network if two signing keys are compromised, blockchain security firm Hacken warned. Hacken said roughly half of Tether’s total USDT supply circulates on Tron and the network is structured so an attacker needs only two signing keys required for USDT control to seize smart contract administrative authority. Hacken explained Tron’s multisignature structure does not directly custody users’ USDT, but instead controls administrative privileges for the USDT smart contract. If an attacker obtains the two required signing keys, the attacker could change contract ownership, mint new USDT without authorization, or freeze specific addresses, according to Hacken. The firm added it found no timelock, cancellation procedure, or separate security mechanism to reverse changes during the administrator rights transfer process. Hacken also said similar risks may exist on other networks including Ethereum, Avalanche, and Celo.