⛈ Targeted denial-of-service attack against TON infrastructure

Some of the most popular infrastructure providers are experiencing a deliberate flood attack that leads to slower or interrupted service.

This attack is aimed at our TonAPI servers, public liteservers, Ton Center, Getblock and Tonhub.

Check out the availability of the infrastructure in real time:
👉 tonstat.us

About the attack

1. Decentralized network of TON nodes is working normally. Transactions get validated at a stable pace of 50 tx/sec.

2. Your funds in Tonkeeper are safe: even if your Tonkeeper has trouble connecting to TonAPI, try again later.

3. This is a deliberate and planned attack. We see a mixture of low-level flood attack by UDP packets that clog the bandwidth and crafted requests aimed at exhausting resources of the indexing services (e.g. triggering expensive TVM evaluation).

4. We do not currently have an estimate when the attack will be mitigated. Every infra provider is trying to reconfigure or relocate their servers to hide them from the attackers' reach. This process may take hours or days.

5. Attackers are adapting quickly. We tried different quick options to divert the flood and noticed how attackers change tactics, discover new IP addresses and resume their activity.

We are proud that our services are important and valuable in the TON community, so that it attracts such unwanted attention. Our team is working overnight to protect our services and come out stronger out of this. I thank all our users for your patience. Hold on tight! ❤️