On August 30, the Cronos blockchain halted operations after a security breach hit its biggest lending protocol, Tectonic. The core of the incident involved Tectonic’s TONIC token, which increased the price of the token by about 100 times in just 20 minutes. The attacker took advantage of this inflated price, using TONIC as collateral to borrow other crypto assets from Tectonic. According to data from PeckShield, about $74 million in assets were involved, though Tectonic and Cronos have not yet officially confirmed the final loss.
Things escalated when Cronos validators stopped the blockchain from processing new blocks. The goal was to keep the attacker from moving more funds out of the network. By then, about $6 million reportedly made it over to Ethereum, while most of the rest remained on Cronos. Tectonic told users not to use its platform during the ongoing investigation and urged them to revoke any token approvals connected to its contracts.
How the Tectonic Attack Unfolded
Tectonic is a lending protocol built on the Cronos blockchain. According to researchers, the attacker exploited low liquidity around TONIC, artificially raising the token’s price by a factor of 100 in just 20 minutes. With the price so high, the attacker used TONIC as a collateral to borrow other assets like USDC and Bitcoin. The total haul was around $74 million, based on analysis from researchers. The real trick wasn’t simply selling TONIC for a profit, the attacker used the risen up price to unlock a bigger line of credit on Tectonic.
Tectonic was Cronos’ largest lending protocol. Before the attack, it had roughly $122 million locked in and about $83 million in active loans. This shows why users and the Cronos community were concerned. Still, it’s not clear how much was actually lost. The $74 million number is just a research estimate, Tectonic and Cronos haven’t confirmed any final figures yet. The investigation was still ongoing at the time of these statements.
Cronos Stops the Network
What really stood out was Cronos’ response; it halted the entire blockchain. On August 30, validators stopped processing blocks as Cronos invested the Tectonic exploit. Shutting down the network seems to have blocked the attacker from pulling more stolen assets out. Researchers say only about $6 million got bridged to Ethereum before everything froze, leaving the majority of the exploited funds stuck on Cronos.
This emergency move disrupted usual activity on Cronos. The chain remained halted as the team investigated with help from security experts across the crypto industry.
This gave people more to think about when it comes to Cronos’ proof of authority setup. Validators could halt everything to contain the attack, which let them act fast when a major protocol was hit. At the same time, pausing an entire network due to one protocol’s exploit shows just how much power validators have and raises new questions about how such crises should be handled.
Crypto.com Says Its App and Exchange Were Safe
News of the breach also made users worried about Crypto.com’s other services, since Cronos is powered by Crypto.com. But CEO Kris Marszalek said the company’s main app and exchange weren’t affected by what happened with Tectonic.
Marszalek explained that the Cronos team was working on the breach, with Crypto.com’s security people also involved. He assured users that the app and exchange were running normally and customers’ funds were safe. So, while Tectonic was the target, Crypto.com’s app and centralized exchange weren’t involved in the breach.
Tectonic Warns Users
Tectonic issued a direct warning. The protocol said user security was its main concern and advised everyone to revoke any token approvals given to its contracts, at least until the investigation finished up. Tectonic added that users who’d interacted with the protocol could have funds at risk. The team asked users to stay away until the safety of its contracts could be confirmed.
Later, Cronos said the blockchain was still halted while the investigation carried on. The team thanked users for their patience and noted that security experts from across the industry were on the case. Right now, the top priorities are figuring out how the TONIC price was manipulated, noting down the exact losses, and deciding what comes next for both the Cronos network and Tectonic protocol.