Cronos Confirms $9.19M Escaped Before Network Halt in Tectonic Exploit

Cronos has published a detailed accounting of the Tectonic exploit, confirming that $9.19 million in assets escaped the network before validators halted block production. The attack generated roughly $120.4 million in borrowing activity after collateral values were manipulated, and a subsequent rollback reversed about $111.2 million of that damage. The updated figures push the total scale of the incident well beyond earlier estimates of $75 million.

The exploit targeted Tectonic's lending markets. A single transaction drained nine markets through 11 transfers involving stablecoins, Bitcoin, Ether and other assets. Blockchain analysis firm Bitquery traced a pattern in which the attacker deposited $5 million, then ran a 98-cycle loop of borrowing and redepositing TONIC tokens while buying up the thinly traded asset, driving its price nearly 300 times higher. This manipulated the price feed used to value collateral, allowing the attacker to borrow far more than should have been possible.

According to Cronos, Tectonic detected suspicious activity at 12:49 UTC on August 30, but validators did not halt the network until 14:32:47 UTC, over 90 minutes later. Block production resumed after balances were restored to their pre-exploit state, but the delay gave attackers a window to move $9.19 million (7.6% of affected funds) off the network before it could be reversed.