Cronos blockchain halts after Tectonic exploit estimated at $75 million
This digest was compiled by AI from multiple sources — links to the originals are below.
The Cronos blockchain halted on Sunday after an exploit hit Tectonic, its largest lending protocol, with an onchain researcher estimating roughly $75 million in assets affected. Cronos Network said it identified the exploit and halted the chain, while Tectonic told users not to interact with the protocol. The halt came even as Crypto.com CEO Kris Marsalek said the firm's app and exchange were not compromised.
Key Facts
- Cronos Network halted the blockchain on Sunday after identifying an exploit in Tectonic, its largest lending protocol.
- Onchain researcher Weilin Li estimated roughly $75 million in assets were affected by the exploit.
- Tectonic had approximately $121.7 million in total value locked and about $82.7 million in active loans before the incident, according to DefiLlama.
- The attacker manipulated TONIC, Tectonic's governance token, to 100 times its price within 20 minutes before using it as collateral to borrow other assets.
- Crypto.com CEO Kris Marsalek said the firm's app and exchange were not compromised and its security team is assisting Cronos with the investigation.
The Exploit
Cronos Network said on X that it identified an exploit in Tectonic and halted the blockchain, promising updates. Tectonic separately said it was investigating an incident affecting the protocol and told users not to interact with it until further notice. The protocol has not yet confirmed the amount affected or detailed the cause of the incident. Onchain researcher Weilin Li attributed the exploit to manipulation of TONIC, Tectonic's thinly traded governance token. Li said the attacker manipulated TONIC to 100 times its price inside 20 minutes, then used the inflated tokens as collateral to borrow other assets from Tectonic.
Attack Mechanics
Tectonic's published money-market parameters give TONIC a 20% collateral factor, allowing users to borrow assets worth up to 20% of the value of TONIC deposited as collateral. Based on roughly 364.6 trillion TONIC tokens Li identified in the attack position, the tokens would need to be valued at about $375 million to support the estimated $75 million in borrowing. That valuation is approximately 100 times TONIC's price near its pre-attack low, per CoinGecko data, matching Li's account of a roughly 100-fold pump before borrowing. Tectonic's documentation warns that low-liquidity assets can be particularly susceptible to price manipulation.
Response and Impact
Li initially estimated the attacker received about $66 million before identifying another attacker-controlled address containing roughly $8 million, bringing the total estimate to approximately $75 million. Li said the attacker was only able to bridge around $6 million to Ethereum before the Cronos network was halted, preventing the majority of affected assets from leaving Cronos. Li's estimate has not yet been independently confirmed by Tectonic or Cronos. Crypto.com CEO Kris Marsalek said in a post on X that the firm's app and exchange were not compromised and that Crypto.com's security team is assisting Cronos with the investigation.
1 source
Cronos blockchain halts after Tectonic exploit estimated at $75 million
