Cronos Rollback Restores $111.2M After $120.4M Tectonic Exploit, $9.19M Still Lost
Validator-led reversal recovered most stolen funds but exposed limits of oracle and liquidity safeguards and left cross-chain recoveries to tracing and outside cooperation.
Overview
- Cronos says an attacker manipulated the price of TONIC and borrowed $120.4 million from the Tectonic lending protocol on Aug. 30 by using the inflated token as collateral across nine markets.
- Validators halted the Cronos chain about 36 minutes after the exploit began and then coordinated a rollback that discarded 10,961 blocks, reversing roughly $111.2 million and returning on-chain balances to their pre-attack state.
- About $9.19 million, equal to 7.6% of the borrowed amount, left Cronos before the halt and cannot be undone by the rollback because those funds settled off-chain or on other networks.
- Post-mortem analysis found the oracle reported market prices but Tectonic failed to account for low on-chain liquidity, highlighting missing safeguards such as borrowing caps tied to executable depth, dynamic collateral limits, and circuit breakers.
- Block production and core services resumed about 11 hours after the attack and Cronos is working with exchanges, bridges and indexers to reconcile records while investigations and cross-chain tracing continue to try to recover the remaining funds.