Industry News

Cronos Blockchain Rolls Back Two Hours of Transactions After $111 Million DeFi Exploit

Decrypt · 8 Sept 2026
Key Takeaway Businesses using DeFi platforms should understand that 'immutable' blockchain transactions can still be reversed by network operators, so treat crypto assets on these platforms with the same caution as any emerging, lightly regulated technology.

The Cronos blockchain, backed by Crypto.com, took the unusual step of erasing almost two hours of transaction history after attackers exploited the Tectonic lending protocol on 30 August. Hackers reportedly manipulated the price of the TONIC token in thin liquidity markets, then used the inflated collateral to borrow around $120.4 million across nine markets.

Validators halted the network and rolled back 10,961 blocks to reverse roughly $111.2 million of the exploit, recovering about 92% of affected funds. This rollback reversed every transaction during that window, including legitimate ones unrelated to the attack, and repriced open positions once trading resumed. Despite the rollback, around $9.19 million had already left the network before the halt and remains unrecovered. The network was offline for about nine hours while validators coordinated a restart using patched software.

Cronos acknowledged poor communication during the incident and said reversed transactions can now only be verified through archived records rather than standard public blockchain explorers. The episode highlights that even blockchain systems marketed as immutable can be altered by network operators under extreme circumstances, raising questions about trust and transparency for businesses relying on decentralized finance platforms.

Summarised by CISO AI from Decrypt. We link back to every original so you can read it yourself.