Cronos Halts Blockchain After $75 Million Attack on Tectonic

Cronos, a blockchain network built by Crypto.com, halted its operations on August 30, 2026, after an attacker exploited a vulnerability in Tectonic, the largest lending market on the chain. The attacker inflated the price of TONIC, a token used as collateral, and borrowed large sums against it, draining over $75 million from Tectonic's deposits.

The attack occurred when the attacker deposited 3,091 TONIC and borrowed 3,697 TONIC, causing the TONIC oracle price to jump by 6.46 times in just 14 seconds. This repriced collateral supported about $125.6 million of borrowing, with the wider market move reaching roughly 100-fold over 20 minutes.

The attacker then pulled real assets out of the protocol, including USDC, USDT, WBTC, WETH, and CRO. About $75.7 million landed in an external wallet, while roughly $43.7 million moved to a contract address, leaving close to $1.73 million across the affected markets.

Tectonic's deposit base collapsed over five days, emptying a protocol that had held nearly half of all capital deposited across Cronos DeFi. The attack follows two similar failures inside a week, with a roughly 3% move in a thin Pendle market triggering about $36 million of liquidations on Morpho.