Cronos Reverses $111M After Tectonic Exploit Triggers Network Halt

TLDR:

• An attacker manipulated TONIC’s price to borrow $120.4 million across nine Tectonic markets.
• Validators halted the Cronos network at block 90,907,150 after spotting irregular activity. 
• Cronos restored chain state to block 90,896,188, reversing $111.2 million in affected funds. 
• About $9.19 million left Cronos before the halt and remains outside the restoration’s reach. 

---

Cronos confirmed that an attacker manipulated collateral values on the Tectonic lending protocol on August 30, borrowing roughly $120.4 million through nine markets.

Validators halted the network within hours to protect user funds. Chain state was later restored to block 90,896,188, reversing about $111.2 million while $9.19 million had already left the ecosystem before the halt.

How the Tectonic Exploit Unfolded

The attacker began deploying contracts at 12:38 UTC, pushing the price of TONIC upward against thin liquidity on decentralized exchanges.

This price manipulation inflated the value of collateral held within Tectonic’s lending markets. At 12:49 UTC, a single transaction used that inflated collateral to borrow approximately $120.4 million across nine separate markets.

The Cronos team identified irregular on-chain activity around 13:25 UTC, as liquidity began exiting the ecosystem through various channels.

Validators moved to halt network operations at 14:32:47 UTC, at block 90,907,150, aiming to limit further outflows while the situation was assessed.

By the time the halt took effect, most of the borrowed funds remained traceable within the network. Cronos reported that around 92 percent of the affected value had not yet left the chain when block production stopped. Only $9.19 million, about 7.6 percent of the total, had already been transferred out before validators acted.

Cronos Network posted an update confirming the sequence of events on its official account, noting the halt was taken to safeguard remaining balances.

Cronos said validators halted the network at 14:32 UTC to protect remaining user funds, and the chain was restored to block 90,896,188 after validator consensus later that day.

Restoration Process and Next Steps for Cronos

Restoring the chain required discarding 10,961 blocks, representing one hour and 54 minutes of settled transaction history.

Every transaction within that window was reversed, regardless of whether it was connected to the exploit itself. Open positions on live applications were repriced once trading resumed under the restored state.

Executing the rollback demanded coordinated consensus across the validator set, with every participant running a patched build from an identical starting point.

The team described working through the night across several rounds of coordination before block production could safely resume. Blocks resumed at 23:49:01 UTC, returning balances to their pre-exploit condition.

Cronos said blocks and transactions from the discarded fork no longer resolve on public explorers, though archive node snapshots remain available for independent verification. The chain explorer, indexers, subgraphs, and public RPC endpoints have since returned to full operation.

Looking forward, Cronos stated no action is required from users, since balances were already returned to their prior state. The team is now working with exchanges, bridges, and other platforms to complete reconciliation.

Cronos also warned users to rely only on official channels and to treat unsolicited recovery messages as scams, while it reviews collateral risk practices and monitoring across the ecosystem.

The post Cronos Reverses $111M After Tectonic Exploit Triggers Network Halt appeared first on Blockonomi.

Source: https://blockonomi.com/cronos-reverses-111m-after-tectonic-exploit-triggers-network-halt/