[REVISION HISTORY]

Cronos blockchain Tectonic protocol exploit

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-09-02 09:18 UTC → 2026-09-08 09:45 UTC · added ~~removed~~

The Cronos blockchain experienced a major security breach involving the Tectonic decentralized lending protocol. Attackers executed a price manipulation exploit on the protocol’s governance token, TONIC, inflating its value nearly 100-fold within a 20-minute window due to thin market liquidity. This allowed the attacker to use the artificially high-value token as collateral to borrow significant amounts of other liquid assets. Initial reports estimated the exploit affected approximately $75 million in assets, causing Tectonic’s total value locked to drop from roughly $121.7 million to about $3 million. To contain the theft, Cronos validators coordinated an emergency halt of block production lasting over ten hours. Following the halt, validators performed a network rollback, restarting the chain from a snapshot taken before the exploit occurred. This action erased approximately 11,000 blocks of history and the stolen assets from the ledger. While the rollback helped mitigate the impact, total estimated losses were later cited in a range between $75 million and $120 million. The incident highlighted a lack of price-deviation safeguards or circuit breakers within the protocol to reject anomalous price spikes reported by oracles. Cronos has since confirmed that $9.19 million in funds were permanently lost. The manipulation of TONIC collateral generated approximately $120.4 million in total borrowing activity. While the network rollback successfully recovered approximately $111.2 million, roughly 7.6% of the affected funds remained unrecovered after being transferred off-chain.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.