All NewsEducationTVBrokers
Equities & FundsCrypto & Digital AssetsAI & TechnologyBusiness & CorporateUS Politics & PolicyGeopolitics & Global RiskMacro, Rates & FXCommodities & EnergyEuropean Politics & MarketsAsia-PacificReal Estate & Property
All NewsHome
← Back to Crypto & Digital Assets

Cronos confirms $9.2M lost in Tectonic exploit rollback

Created at 8 Sep · 8:31 AM1 source↑ Market-relevant
IN SHORT

Cronos blockchain confirmed that $9.19 million in assets were transferred off-network before validators halted operations during the Tectonic exploit. The incident involved manipulated collateral values leading to approximately $120.4 million in borrowing activity.

Key Numbers

$120.4 millionaffected borrowing activity
7.6%funds transferred off-network
$9.19 millionfunds not reversed by rollback
$111.2 millionfunds reversed by rollback
$5 millioninitial attacker deposit
98TONIC price manipulation cycles
nearly 300-foldTONIC price increase

Who's Involved

Cronos
Layer-1 blockchain confirming exploit details
Tectonic
DeFi protocol affected by the exploit
Bitquery
Blockchain data provider

↳ Why This Matters

This incident highlights the risks associated with decentralized finance protocols and the challenges in fully reversing exploits, underscoring the importance of robust security measures and rapid response mechanisms in the crypto space.

Key facts

  • Cronos confirmed $9.19 million was lost in the Tectonic exploit.
  • The exploit involved manipulated collateral values, leading to $120.4 million in borrowing.
  • 7.6% of affected funds were transferred off-network before validators intervened.
  • The network was halted and later restored after balances were rolled back.

Cronos blockchain has provided an official accounting of the Tectonic exploit, confirming that $9.19 million in assets were transferred off-network before validators intervened to halt and roll back the network. The post-mortem report stated that manipulated collateral values generated approximately $120.4 million in borrowing activity. While the rollback restored about $111.2 million, 7.6% of the funds remained outside the network's control.

The disclosure clarifies the scale of the incident, with the confirmed loss exceeding earlier estimates. Blockchain data provider Bitquery had previously traced over $8.3 million to Ethereum. The exploit involved an attacker depositing $5 million and then repeatedly borrowing and redepositing the thinly traded TONIC token, which drove its price up nearly 300-fold and affected Tectonic's price feed. Tectonic detected the activity on August 30, and Cronos validators halted network production shortly after. Block production resumed later that day after balances were restored.

Frequently asked questions

The Tectonic exploit involved manipulated collateral values on the Cronos blockchain, leading to unauthorized borrowing and the transfer of funds off-network before validators could intervene.

Cronos confirmed that $9.19 million was transferred off-network and could not be recovered by the rollback.

The exploit was triggered by an attacker manipulating the price of the TONIC token through repeated borrowing and redepositing, which inflated collateral values and allowed for massive borrowing.

What Happens Next

01Further analysis of the exploit's impact on Tectonic and Cronos.
02Review of security protocols by DeFi platforms.

How It Developed

Manipulated collateral values generated about $120.4 million in borrowing activity on Cronos.
The attacker deposited $5 million and used a 98-cycle loop to drive TONIC's price up.
Tectonic detected the activity at 12:49 UTC on Aug. 30.
Validators halted the Cronos network at 14:32:47 UTC.
Block production resumed at 23:49:01 UTC after balances were restored.
Approximately $111.2 million was reversed by the rollback.
Cronos confirmed $9.19 million was transferred off-network and not reversed.

Sources

T1
Cronos confirms $9.2M slipped away before Tectonic exploit rollbackCronos’s post-mortem put the Tectonic exploit’s affected borrowing at $120.4 million, with 7.6% transferred off-network before validators intervened.Cointelegraph

Related Stories

Liquid Hackers Return $270M in Bitcoin After Swiping $320 Million
7 Sep · 7:20 PM
Coldcard attacker moves $7.7M in stolen Bitcoin via THORChain, CoinJoin
7 Sep · 9:46 AM
Polish prosecutors charge suspect in Zondacrypto probe
7 Sep · 6:05 PM
Australia cancels 45 crypto, remittance registrations
8 Sep · 5:25 AM
Ripple CEO: Crypto Can Facilitate Instant Value Transfer for Central Banks
7 Sep · 3:11 PM