On April 23, 2026, Tether announced that it had cooperated with the U.S. Department of the Treasury and law enforcement agencies to freeze two USDT addresses on the TRON network, with a total frozen amount of approximately 344 million USDT.

We "know it's dangerous," but we "don't know what the danger looks like."

This report describes attack patterns based on publicly available threat intelligence and does not attribute activity to any specific country, organization, or individual.

Kelp DAO fell victim to a sophisticated exploit resulting in a catastrophic loss of $293 million.

This operation was led by an automated AI agent requiring no human intervention.

The attackers leveraged an AI tool, Context.ai, as an entry point.

By March 2026, its total value locked (TVL) had exceeded $1.2 billion, ranking third among Solana DEXs, surpassing even older protocols like Serum.

The Real Problem Isn't the Hack — It's How We Trust the System

The attacker targeted Composable Stable Pools, exploiting a rounding direction error in scaling math combined with the composability of batchSwap

Two landmark cases—EchoLeak and ForcedLeak—demonstrate that zero-click attacks and indirect prompt injection have become core risks facing enterprise AI assistants.