Cronos Halts Blockchain After $75M Tectonic Exploit

Cronos' blockchain was halted after an exploit targeting Tectonic, a decentralized lending protocol, involved an estimated $75 million in losses. The attack occurred on Sunday and saw the attacker pump the governance token's price 100-fold within 20 minutes before borrowing other assets. Researcher Weilin Li described it as a 'Mango-market style' pump-and-borrow attack.

The attacker exploited TONIC's 20% collateral factor and thin liquidity, bridging about $6 million to Ethereum before the halt, leaving $60 million on Cronos. Li later identified another attacker-controlled address holding about $8 million, bringing his estimated loss to roughly $75 million. Crypto.com CEO Kris Marszalek confirmed that their app and exchange were unaffected and operating normally.

Cronos and Tectonic have not said whether they will restrict the attacker's addresses or recover the assets. The projects have also not indicated if they will compensate affected users, leaving many in uncertainty.