Transit Finance — Improper Access Control
Transit Finance suffered an exploit on its deprecated TRON smart contract, resulting in approximately $1.88 million in DAI being drained. The stolen funds were transferred to an Ethereum address. The team confirmed it was isolated to legacy code, stated that current contracts are secure, and completed remediation.
- Estimated loss
- $1,880,000
- Protocols
- Transit Finance
- Chains
- Tron
- Confidence
- High
- First seen
- 13 May 2026, 00:00 UTC