Cronos Blockchain Halted After $75 Million Exploit at Tectonic Protocol

Cronos Network Halts After Tectonic Exploit

The Cronos blockchain ground to a halt on Sunday following a significant security breach at Tectonic, its largest DeFi lending protocol. According to Cronos Network, the team identified an exploit in the lending platform and made the immediate decision to pause the entire chain, effectively freezing all transactions and DeFi positions to contain the attack and prevent further damage.

Tectonic is the dominant DeFi application on Cronos, controlling roughly half of all capital deposited across the network’s decentralized finance ecosystem. The protocol allows users to deposit cryptocurrency to earn yield while others can borrow against posted collateral. By Monday, the chain remained offline as the Cronos team investigated the incident with support from security partners across the industry. Notably, Crypto.com’s core exchange and app were unaffected by the blockchain halt.

The Mechanics of the Attack

Security researchers have identified the exploit as a pump-and-borrow price manipulation attack, similar to the $100 million Mango Markets breach that occurred in October 2022. According to onchain researcher Weilin Li, the attacker artificially inflated the price of TONIC, Tectonic’s governance token, by approximately 100-fold within just 20 minutes. The token’s extremely low liquidity—standing at roughly $1.34 million—made this price surge possible with relatively modest capital.

The root cause was a critical configuration error in Tectonic’s risk parameters. The protocol had assigned TONIC a 20% collateral factor despite the token’s extremely thin liquidity, allowing the attacker to borrow significant value against the artificially pumped price. By artificially raising TONIC’s value through concentrated buying, the attacker was able to borrow far more than would have been possible under normal market conditions, ultimately extracting roughly $75 million from the protocol before being detected.

Damage and Recovery Efforts

According to security firm PeckShield, the total loss reached approximately $74 million. A critical detail emerged regarding the attacker’s exit strategy: roughly $6 million was successfully bridged to Ethereum before Cronos Network froze the blockchain, while the remaining $60 million remains trapped on the halted chain. Before the exploit, Tectonic held approximately $121.7 million in user deposits with $82.7 million in active loans—nearly half of all capital locked in Cronos DeFi applications.

The impact on the ecosystem has been severe and swift. DeFi capital on Cronos collapsed by 97.5% within 30 days following the incident. The second-largest lending protocol on the network, Mimas Finance, holds only about $30,000 in total deposits, highlighting Tectonic’s outsized importance to the Cronos ecosystem and the concentration risk the exploit exposed.

Tectonic’s collapse demonstrates why rigorous DeFi audits and conservative collateral factor assignments are critical safeguards across the entire crypto market.

Source: Cronos Network, via Decrypt. Not financial advice.