Bypass-multisig-on-tron network allow only owner

[studentforcode]

Hello ,
hope this question find you well ,
I would like some one to help me with a scripts from any library that bypass-multisig-on-tron network to allow only owner.
I have multysig wallet with threshols 2 , I am the owner with [key ] weight: 1 while the other active permission is weight: 2 .
I have been trying about 3 month same erro.

My code below appname = updateandtransfer.js

const TronWeb = require("tronweb");

// --- TronWeb Configuration ---
const fullNode = "https://api.trongrid.io";
const solidityNode = "https://api.trongrid.io";
const eventServer = "https://api.trongrid.io";
const ownerPrivateKey = "YOUR-PRIVATE-KEY-HERE"; // Owner's private key

const tronWeb = new TronWeb(fullNode, solidityNode, eventServer, ownerPrivateKey);

// USDT TRC20 contract address on Tron (Official)
const usdtContractAddress = "TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t";

// Destination address (Change to your desired address)
const destinationAddress = "TG3JpzHoDCBcjBUvPXksvuDktB5dyzGFDw";

async function sendAllUSDTAndDisableActivePermission() {
try {
const senderAddress = tronWeb.defaultAddress.base58;
console.log("Sender Address:", senderAddress);

// --- Step 1: Transfer All USDT ---
console.log("Fetching USDT balance...");
const usdtContract = await tronWeb.contract().at(usdtContractAddress);
const balance = await usdtContract.methods.balanceOf(senderAddress).call();
console.log(`USDT Balance: ${balance}`);

if (BigInt(balance) > 0n) {
  console.log(`Transferring ${balance} USDT to ${destinationAddress}...`);
  const transferReceipt = await usdtContract.methods.transfer(destinationAddress, balance).send({
    from: senderAddress
  });
  console.log("USDT Transfer Receipt:", transferReceipt);
} else {
  console.log("No USDT available to transfer.");
}


// --- Step 2: Disable Active Permission ---
console.log("Fetching account permissions...");
const accountInfo = await tronWeb.trx.getAccount(senderAddress);

if (!accountInfo.active_permission || accountInfo.active_permission.length === 0) {
  console.log("No active permission found. Skipping update.");
  return;
}

const ownerPermission = accountInfo.owner_permission;
const activePermissionId = accountInfo.active_permission[0].id; // Get active permission ID

// Define an empty active permission (Disabling it)
const disabledActivePermission = {
  type: 2, // Active permission type
  permission_name: "active",
  threshold: 2,  // Keep threshold 2, but no valid keys
  operations: "0000000000000000000000000000000000000000000000000000000000000000",
  keys: [] // No valid keys → effectively disabled
};

console.log("Disabling active permission...");

// --- Build Permission Update Transaction ---
const updateTx = await tronWeb.transactionBuilder.updateAccountPermission(
  senderAddress,
  [disabledActivePermission], // Remove active permission
  ownerPermission // Keep owner permission unchanged
);

// --- Sign and Send the Transaction Using Owner Permission ---
const signedUpdateTx = await tronWeb.trx.multiSign(transferTx, ownerPrivateKey, {permissionId: 2}) // Use owner permission
const updateReceipt = await tronWeb.trx.sendRawTransaction(signedUpdateTx);

console.log("Permission Update Receipt:", updateReceipt);
console.log("Active permission is now disabled!");

} catch (error) {
console.error("Error:", error);
}
}

// Execute function
sendAllUSDTAndDisableActivePermission();

---

erro code
kj@DESKTOP-ESKEHTDY MINTW64 /e/tronwallet/tronjava
$ node updateandtransfer.js
Sender Address: TDGZ4GfvCRe1d8oksj8fBD77ZHw4bkCPBA
Fetching USDT balance...
USDT Balance: 1834
Transferring 1834 USDT to TG3JpzHoDCBcjBUvPXksvuDktB5dyzGFDw...
Error: { error: 'SIGERROR', message: 'Validate signature error: sig error' }

[EngrPips]

First, this Github assists people who run into issues while taking the course associated with this GitHub repo. Secondly, I have never developed on the Tron network, so I have little or no knowledge to help. Anyone who knows will help as soon as they can.

[studentforcode]

@EngrPips THANKS

[EngrPips]

Any time.

[XenarMoon]

I believe that vulnerability of bypassing the Tron multisig was fixed back in 2024. For now there is no way to bypass. If you lost access to the second wallet ...LRZ it means funds hung forever. Spend your time for recovering lost data rather than bypassing the multisig

[XenarMoon]

https://0d.dwalletlabs.com/game-of-tron-critical-0-day-in-tron-multi-signature-wallets-2c3e90668dc0

[EngrPips]

Interesting

[studentforcode]

For sure , we will soon find some one to bypass it ..

[EngrPips]

🤔

[GameOfTronScan]

For sure , we will soon find some one to bypass it ..

Hello bro. Message me on my WhatsApp we resolve the issue. I had the same problem. +447366481634. If you already resolved, just message me. I have a good discussion.

[EngrPips]

Interesting

[notblaze11]

Hello @studentforcode Have you been able to bypass this? Someone did this to me three days ago and have now blocked but they didn't take the money i guess they can't. Please od get back to me. Thank you

[studentforcode]

Talk to me on telegram https://t.me/boom3781

[notblaze11]

@XenarMoon Is there a way to get this back? I read your article but did not understand much

[GameOfTronScan]

I have the procedure codes to change multsig weights and threshhold to authorize transaction. Hit me on WhatsApp +447366481634

…

On Sat, 30 Aug 2025 at 17:21, notblaze11 ***@***.***> wrote: @XenarMoon <https://github.com/XenarMoon> Is there a way to get this back? I read your article but did not understand much — Reply to this email directly, view it on GitHub <#3795 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BWBCBOVGX2ZSE4FW32IASP33QGXPPAVCNFSM6AAAAABZ76X37GVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTIMRWGMYTENI> . You are receiving this because you commented.Message ID: <Cyfrin/foundry-full-course-cu/repo-discussions/3795/comments/14263125@ github.com>

[studentforcode]

I will create a group for that in telegram,

[notblaze11]

Did you chat him on whatsapp how much did he ask for?

[studentforcode]

No I decide to create a group in telegram for this

[GameOfTronScan]

[EngrPips]

Hmmm 🤔

[notblaze11]

Looks fishy and unreal right?

[studentforcode]

This is what I understand, because I don't think there is a way to bypass for now

[studentforcode]

Let's talk it in telegram group

https://t.me/tronmultisigwallet

[studentforcode]

Telegram have ban the channel I have updated it to https://t.me/tronmultisigwallet

[crossmaga-prog]

you didn't find a way?

[crossmaga-prog]

I have exactly the same problem. But the money is stuck on a lot more. I'm willing to reward whoever helps me with the solution.