PinGo CDN Staking Security Incident Summary
On Sept 7, 2026, our CDN staking contract was exploited, resulting in a confirmed net loss of 295,000 PINGO. All times below are UTC.
Affected contract:
EQCErt42loRpoDDZN8bsTbVgahGlP_PET3zRjkoQsKA4LUsn
The attacker initially purchased approximately 5,000 PINGO on
STON.fi and used 5,000 PINGO to establish a legitimate stake. They then exploited unauthorized staking timestamp changes to bypass early-withdrawal fees, combined with missing withdrawal locking and duplicate-payment checks to repeatedly withdraw the same stake before it was cleared.
Between 13:23 and 13:29:, the attacker repeated this process across 13 cycles, receiving 360,000 PINGO against 65,000 PINGO in cumulative successful deposits. The difference, 295,000 PINGO, is the confirmed stolen amount.
Our internal alerting system detected the attack at 13:26, prompting an immediate investigation and containment response.
At 13:45(less than 20 mins after detection) we disabled new staking, preventing the attacker from creating fresh stakes to repeat the exploit. Subsequent staking attempts were rejected and refunded.
At 13:56, we transferred the remaining 179,000 PINGO from the affected pool to the administrator wallet, protecting those funds from further exposure.
Subsequent fund tracing confirmed:
- 14:03: 96,000 PINGO transferred to an address labeled
Gate.io. Any sale within Gate remains unverified.
- 14:09: 204,000 PINGO sold on
STON.fi DEX.
These movements total 300,000 PINGO and include the attacker’s original funds. The confirmed net theft remains 295,000 PINGO.
[Staking suspension](
tonviewer.com/transaction/ac…) ·
[Remaining funds secured](
tonviewer.com/transaction/32…) ·
[Gate transfer](
tonviewer.com/transaction/f6…) ·
[DEX sale](
tonviewer.com/transaction/7b…)
✅ Security & Contract Upgrade Update
Hi, our beloved PinGo community!
Following our recent security incident, we the PinGo team has identified that the attack was related to the asynchronous execution model of the TON.
To strengthen the security of the protocol and prevent similar issues from occurring again, we will be upgrading the PinGo contract.
Our team is working closely with exchange, and we will communicate with CEX to resume
$PINGO deposits asap once the upgrade and necessary security checks are completed.
We sincerely appreciate your patience and support for us. We’re working hard to resolve this and move forward stronger. 💚
-PinGo Team