Cronos Restarts After Rollback of Tectonic Exploit

Overview

• Cronos validators halted block production during the attack and then restored the blockchain to a state before the exploit to stop most stolen transfers.
• On-chain researchers say the attacker pumped the TONIC token about 100-fold and used the inflated holdings as collateral to borrow roughly $66 million to $75 million from Tectonic.
• About $6 million to $6.29 million was bridged to Ethereum before the halt and cannot be reversed, while the remainder of suspected proceeds were frozen or removed by the rollback.
• Tectonic’s total value locked plunged from roughly $121.7 million to about $3 million after the incident and no formal recovery or compensation plan has been announced.
• The attack follows a known pump-and-borrow pattern first seen in Mango Markets and highlights risks of using thinly traded governance tokens as collateral and the trade-offs of Cronos’s small validator set.