Cronos paused its blockchain Aug. 30 after an exploit targeting lending protocol Tectonic drained an estimated $75M, with most funds still on the network.
Crypto Security & DeFi Exploit News
The Cronos blockchain went offline on Aug. 30 after an attacker exploited decentralized lending protocol Tectonic (TONIC) in an incident that independent researcher Weilin Li estimated caused roughly $75 million in losses. The network remained halted at the time of writing, with most of the stolen funds still on-chain.
Cronos announced the suspension on social media after identifying the exploit, saying it would provide updates as its investigation continued. Tectonic issued a concurrent warning telling users not to interact with the protocol. Neither team confirmed the root cause or an official loss figure, and no restart timeline was given.
Li traced the attack to TONIC's 20% collateral factor and low liquidity. The attacker pushed the governance token's price up 100-fold in under 20 minutes, then used that artificially inflated collateral to borrow other assets from the protocol. Li called it a "Mango-market style" pump-and-borrow attack.
Funds Tracked Across 2 Wallets
Li's initial estimate stood at $66 million. He said approximately $6 million was bridged to Ethereum (ETH) before the halt, leaving around $60 million on Cronos. After locating a second address controlled by the attacker holding about $8 million, Li raised his total estimate to $75 million.
Crypto(dot)com CEO Kris Marszalek said on social media that the company's app and exchange operated normally throughout the event and that user funds held there were not affected.
Cronos and Tectonic had not publicly stated whether they planned to freeze the attacker's wallets, attempt to recover assets, or compensate affected users. Cointelegraph said it contacted both projects and Crypto(dot)com but had not received responses before publication.
Collateral Design at the Center of the Attack
Pump-and-borrow attacks exploit a structural weakness in protocols that accept low-liquidity tokens as collateral. A relatively small amount of capital can move prices sharply when order books are thin, and a high collateral factor multiplies the borrowing power that inflated price creates.
Related Article: Harmony Confirm Exploit After Attacker Mints 4B ONE Token
With a large portion of the stolen funds still sitting on Cronos at the time of the halt, whether the chain can freeze or recover those assets before they are moved elsewhere remains an open question.
This article contains links to third-party websites or other content for information purposes only (“Third-Party Sites”). The Third-Party Sites are not under the control of CoinMarketCap, and CoinMarketCap is not responsible for the content of any Third-Party Site, including without limitation any link contained in a Third-Party Site, or any changes or updates to a Third-Party Site. CoinMarketCap is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement, approval or recommendation by CoinMarketCap of the site or any association with its operators. This article is intended to be used and must be used for informational purposes only. It is important to do your own research and analysis before making any material decisions related to any of the products or services described. This article is not intended as, and shall not be construed as, financial advice. The views and opinions expressed in this article are the author’s [company’s] own and do not necessarily reflect those of CoinMarketCap.
