Cronos halted its blockchain on August 30 after identifying an exploit affecting Tectonic, the network’s largest lending protocol, as investigators traced tens of millions of dollars in unaut
Cronos halted its blockchain on August 30 after identifying an exploit affecting Tectonic, the network’s largest lending protocol, as investigators traced tens of millions of dollars in unauthorized borrowing.
Onchain researcher Weilin Li placed the affected assets at roughly $75 million, while Tectonic separately warned users not to interact with the protocol until it confirms operations are safe. The $75 million figure remains preliminary pending Tectonic’s final accounting.
The attack centered on TONIC, Tectonic’s thinly traded governance token. Li traced a price-manipulation sequence in which TONIC rose roughly 100-fold within about 20 minutes before the inflated tokens were used as collateral to borrow more liquid assets.
Tectonic’s money-market parameters assigned TONIC a 20% collateral factor, allowing borrowers to draw loans worth up to one-fifth of its accepted collateral value. Li identified roughly 364.6 trillion TONIC in the attack position, creating enormous borrowing capacity once the token’s price was pushed higher in shallow markets.
The structure closely resembles the recent Moonwell oracle attack, where MAMO’s thin liquidity allowed an inflated collateral price to support millions of dollars in borrowing on Base.
Li initially estimated roughly $66 million in affected assets before identifying another attacker-linked address holding around $8 million, pushing his total estimate toward $75 million.
The borrowed assets included stablecoins, wrapped Bitcoin, wrapped Ether and CRO. A separate archive-node analysis measured $54.32 million in USDC, $44.87 million in USDT, 95.36 WBTC, 1,861 WETH and 39.61 million CRO among withdrawals from the affected markets, although that analysis produced a larger gross outflow estimate that includes additional protocol activity.
Only about $6 million was bridged to Ethereum before Cronos stopped producing blocks, leaving most exploit-linked assets stranded on the network. The intervention resembles the recent KiiChain halt, where validators also stopped a Layer 1 while assets remained recoverable onchain.
Crypto.com CEO Kris Marszalek said the company’s app and exchange were unaffected and continued operating normally. Crypto.com’s security team is assisting Cronos with the investigation, while Tectonic operates as an independent lending protocol on the network.
Before the exploit, Tectonic held about $121.7 million in total value locked and $82.7 million in active loans. Cronos had not published a restart block early Monday, August 31, and Tectonic’s standing instruction remains for users to avoid interacting with the protocol until it confirms the platform is safe.
The post Cronos Halts Blockchain After Tectonic Exploit Estimated at $75M appeared first on Crypto Adventure.
