Particle.news

Cronos Restarts After Validators Roll Back Chain to Stop $75M Tectonic Pump-and-Borrow Attack

About $6.29 million reached Ethereum before the rollback, leaving final loss figures and any recovery plan unresolved.

Overview

  • Validators halted block production and restored the Cronos ledger to block 90,896,189 on Aug. 30 to stop an attacker from moving funds after a rapid exploit of the Tectonic lending market.
  • The attacker pumped TONIC, Tectonic’s thinly traded governance token, roughly 100× in about 20 minutes and used the inflated balance as collateral to borrow large amounts from Tectonic.
  • On-chain researchers and security firms estimate roughly $75 million was implicated in the incident while only about $6.29 million was bridged to Ethereum before the shutdown and cannot be automatically reversed.
  • The rollback froze most suspected proceeds on Cronos and let the network come back online, but it raises questions about finality because a small, capped validator set made the emergency reversal possible.
  • Cronos, Tectonic and Crypto.com have promised a postmortem and are still reconciling losses and options for depositors, and the attack highlights risks of accepting illiquid governance tokens as collateral without stronger price oracles and limits.