Cronos Rollback Restores $111.2M After Tectonic Exploit, $9.19M Escapes
Validators restored the chain to its pre‑exploit state to recover most funds following an attack on the Tectonic lending protocol.
Overview
- An attacker manipulated the price of TONIC and used the inflated token as collateral to borrow $120.4 million from Tectonic on Aug. 30, according to Cronos’ post‑mortem.
- Validators halted block production, agreed to restore the chain to block 90,896,188, and discarded 10,961 blocks to reverse roughly $111.2 million in affected transactions.
- About $9.19 million, roughly 7.6% of the borrowed sum, left Cronos before the halt and remains unrecovered because cross‑chain transfers fall outside the rollback’s reach.
- Security analysis says the oracle reported market prices for the venue it watched but Tectonic accepted a price for a thinly traded token without limits tied to market depth or borrow caps.
- The rollback erased legitimate user activity during the window and forced exchanges, bridges, indexers and explorers to reconcile records as validators, developers and partners trace funds and review safeguards.