Cronos reports $9.2M unrecovered after exploit

An attacker manipulated collateral on the Tectonic lending protocol, borrowing approximately 120.4 million before Cronos blockchain validators halted the network on August 30, 2026. A subsequent rollback restored most of the affected funds, but 9.19 million remains unrecovered, according to a postmortem report released by Cronos. The exploit began when an attacker deployed contracts to artificially inflate the price of TONIC, Tectonic's thinly traded governance token. Within approximately 10 minutes, the inflated value of TONIC was used as collateral to borrow funds across nine lending markets. Cronos identified the malicious activity about 36 minutes after the attack commenced. To mitigate the exploit, Cronos validators halted network activity and initiated a rollback to block 90,896,188, the last block produced before the attack. This action reversed approximately 111.2 million in borrowed assets that remained on the network, restoring affected balances to their pre-exploit state. The rollback discarded 10,961 blocks, covering 1 hour and 54 minutes of transaction history, including unrelated activity.