Stay vigilant against phishing attacks. Chorus One sends emails exclusively to contacts who have subscribed. If you are in doubt, please don’t hesitate to reach out through our official communication channels.

Blog

Introducing Our Innovative Pooled Staking Solution: Prioritising Security in the Digital Assets

Chorus One
Chorus One
July 9, 2025
2 min
5 min read
July 9, 2025
5 min read

As announced earlier this year, Chorus One is proud to have launched TON Pool, an institutional-grade pooled staking solution on Telegram Open Network (TON) that enhances the staking experience with a focus on security and addressing technical risks.

TON Pool has been based on the work of the Ton Whales team. As part of our commitment to offering institutional-grade solutions, Chorus One partnered with Spearbit to complete a smart contract audit that revealed the underlying Ton Whales contracts lack adequate risk mitigation, potentially leading to users' staked tokens being lost. 

Our audit identified two critical risks:

  1. Pool Locking: Lack of error handling when interacting with the Elector can lead to an inconsistent contract state and losing the full stake. If this occurs, no user in that pool will be able to recover their stake after this point.
  2. Pool Draining: If funds become stuck in the proxy contract, an attacker can exploit a specific send method to drain funds, putting users at risk and resulting in fund losses.

Both of these issues have been mitigated in the Chorus One’s TON Pool. These issues have not been mitigated in the original Ton Whales contract, and users staking to Ton Whales should be aware that if either of these above risks occurs, their stake may be lost. 

Efforts to help secure Ton Whale stakers

Chorus One has proactively engaged the Ton Whales team in an effort to protect the community, and as a good community member, to respect the Ton Whales smart contracts. Chorus One initially sent the smart contract findings in early March and again reached out to them before making our updated smart contracts publicly available and publishing this article. Up till the time of writing, we have not heard back from the team behind those contracts, which brings concerns as ignoring these risks puts the stake and the ecosystem at a vulnerable position. As of now, Ton Whales has not addressed the issues found, at least not in the open-sourced contracts.

Assuring the continued security of the Chorus One Ton Pool 

Chorus One continues to test and, where necessary, improve the security of the Chorus One TON Pool. This is done by actively testing proprietary solutions internally and with our partners. 

A Commitment to the Community

At Chorus One, we aim to deliver innovative products and advocate for a safer digital assets environment. We are committed to leading in security and challenging the status quo.

In conclusion, our TON Pool staking solution sets a higher standard for security and trust. We encourage users to evaluate their options carefully and build a safer future for digital assets together.

About Chorus One

Chorus One is one of the largest institutional staking providers globally, operating infrastructure for over 60 Proof-of-Stake (PoS) networks, including Ethereum, Cosmos, Solana, Avalanche, Near, and others. Since 2018, we have been at the forefront of the PoS industry, offering easy-to-use, enterprise-grade staking solutions, conducting industry-leading research, and investing in innovative protocols through Chorus One Ventures. As an ISO 27001 certified provider, Chorus One also offers slashing and double-signing insurance to its institutional clients. For more information, visit chorus.one or follow us on LinkedIn, X (formerly Twitter), and Telegram.