ChainCatcher news, the security agency Dilation Effect has posted on Twitter to remind that recently attackers have been attempting large-scale fake USDT top-ups on the TON chain. Dilation Effect's on-chain monitoring system has detected that a malicious address is deploying counterfeit USDT token contracts, with the Metadata data identical to the official USDT, and has already conducted fake top-up tests on major exchanges.Dilation Effect specifically warns that many exchanges have only recently begun to support USDT top-ups on the TON chain, and their systems may not yet be fully developed, making them vulnerable to fake top-up attacks. The attackers' strategy usually involves first conducting small test top-ups, then gradually increasing the amount in an attempt to defraud larger sums of money. Exchanges should strengthen monitoring, especially for large TON chain USDT top-ups, to rigorously review them and prevent the impact of fake top-up incidents on fund security.

ChainCatcher news, according to the on-chain intelligence from the Slow Mist security team, the LDO token contract does not trigger a transaction rollback when the transfer amount exceeds the actual amount held by the user. Instead, it directly returns a false as the processing result. This handling method is different from many common ERC20 standard token contracts.Due to the above characteristics, there is a potential risk of "false recharges." Malicious attackers may attempt to exploit this feature for fraudulent activities. Slow Mist recommends the following:When processing the logic of token deposits, do not rely solely on the success or failure of the transaction, but also make judgments based on the actual return value of the token contract.Please note that there are many non-ERC20 standard token contracts in the market. Before integrating a new token, it is essential to have a deep understanding and analysis of its contract code to ensure the correct deposit logic is implemented.It is recommended to conduct regular code audits and security checks to ensure the robustness and security of the system.The implementation and behavior of token contracts may vary by project. To ensure the safety of funds and the accuracy of transactions, it is strongly advised to thoroughly understand the contract logic and conduct sufficient testing before integrating any new token.