Cronos Halts Blockchain After $75M Tectonic Exploit

Cronos halted its blockchain on August 30 after detecting an exploit involving Tectonic, a decentralized lending protocol operating on the network. Researcher Weilin Li estimated that around $75 million was affected by the incident, although this figure has not been confirmed by Tectonic.

The attack is believed to have involved inflated collateral from TONIC, Tectonic's governance token, which was valued at a 20% collateral factor despite limited market liquidity. This allowed an attacker to increase the market price of TONIC roughly 100-fold over about 20 minutes, then supply the inflated tokens as collateral and borrow other assets from Tectonic.

The incident resembles earlier attacks where thinly traded collateral was assigned an inflated valuation. Li described it as a 'Mango-market style' pump-and-borrow attack. The affected assets remained on Cronos after validators halted block production, but this does not mean they have been recovered.