Cronos Blockchain Restarts After $74M Tectonic Exploit

The exploit targeted Tectonic, a decentralized finance (DeFi) lending application built on Cronos. An attacker artificially inflated the price of Tectonic’s TONIC token by 100 times its value, and did it fast, over just 20 minutes. That inflated TONIC was then used as collateral to borrow real assets from the protocol.

According to current information, the attacker managed to steal roughly $6 million worth of Ethereum before the network responded. The remaining borrowed funds, totaling $74 million, became stuck on the Cronos network itself. Blockchain security firm PeckShield flagged this detail. Cronos is an Ethereum-like blockchain associated with Crypto.com.

Tectonic was Cronos’ largest lending protocol before the exploit, holding $122 million in total value locked. After the incident, that figure collapsed to just under $3 million, according to DeFiLlama. Tectonic advised users to avoid interacting with the protocol while the investigation was ongoing.

Cronos moved quickly once the exploit was detected. Validators triggered an emergency consensus action that halted all blockchain operations, freezing every in-progress transaction network wide. The chain state was then rolled back to before the Tectonic exploit occurred. Cronos confirmed it is now producing blocks again, starting from block 90,896,189, and has stated the network is fully back online.

The blockchain remains under close monitoring for stability and protocol compatibility to catch any lingering issues. Cronos plans to publish a post-mortem report soon, which should provide further detail on how the exploit happened and what changes follow from it.

Hashlytics Take

A chain rollback is not the same thing as a fix. Cronos froze the network and reset state to before the attack, which stopped further bleeding, but it also means the network’s validators made a unilateral decision to rewrite recent history, something that only works because Cronos is far more centralized than the Ethereum it’s modeled on. That tradeoff is rarely discussed openly: you get fast incident response precisely because you don’t have the decentralization guarantees that would make a rollback impossible. Worth remembering next time a chain markets its uptime and resilience during a crisis.