Cronos Confirms $9.19 Million Remains Missing Following Tectonic Exploit

Summary

• Cronos confirmed that $9.19 million remains unrecovered, while its validator-approved rollback restored approximately $111.2 million affected by Tectonic’s lending exploit.
• The attacker inflated TONIC’s price, borrowed $120.4 million across nine markets, and prompted validators to halt Cronos operations during emergency measures.
• The rollback erased 10,961 blocks, while Cronos restored network services and coordinated transaction reconciliation with external exchanges and affected bridges.

 

Cronos has confirmed that $9.19 million remains unrecovered from the Tectonic exploit, despite restoring $111.2 million through a blockchain rollback. According to Cronos, an attacker manipulated Tectonic’s collateral system and borrowed $120.4 million across nine markets on August 30.

TONIC Price Manipulation Triggers $120.4 Million Borrowing Exploit

The attacker deployed contracts that inflated TONIC, the governance token of the Tectonic lending protocol. TONIC’s limited liquidity enabled the attacker to distort its price and increase the apparent value of deposited collateral.

About ten minutes later, the attacker used that inflated collateral to secure substantial loans across Tectonic’s markets. Cronos detected the malicious activity approximately 36 minutes following the attack and coordinated an emergency response with validators.

Also Read: XRP Liquidation Imbalance Hits 10,535% as Leveraged Longs Collapse

Validators halted operations at block 90,907,150, preventing additional transactions through the compromised system. Following consensus, they approved a rollback to block 90,896,188, the final block recorded before the exploit.

Consequently, the rollback restored affected balances and reversed approximately $111.2 million in unauthorized borrowing. This intervention prevented the attacker from controlling most assets obtained through the manipulated collateral position.

However, it could not recover assets already transferred through bridges, exchanges, or other networks. Around $9.19 million escaped before validators stopped operations, representing approximately 7.6% of the total affected funds.

Although the rollback restored most assets, it also removed legitimate transactions completed during the compromised period. Cronos discarded 10,961 blocks covering one hour and 54 minutes of network activity.

Therefore, users with transactions unrelated to Tectonic experienced reversals because validators returned Cronos to an earlier state. Cronos acknowledged that the decision required balancing transaction finality against funds facing possible loss.

Cronos Restores Services Following Validator Intervention

Block production resumed approximately 11 hours after the incident began, with affected balances returned to their earlier positions. Additionally, Cronos restored its block explorer, indexers, subgraphs, and public RPC endpoints.

The team is coordinating with exchanges, bridges, and affected platforms to reconcile transactions removed during the rollback. However, the post-mortem did not identify the attacker or explain how Cronos might address the outstanding $9.19 million. Cronos (CRO), the network’s native cryptocurrency, gained 0.62% over 24 hours and traded near $0.058 following the disclosure.

Also Read: Ripple Shifts $1.36 Million in RLUSD From XRP Ledger to Ethereum

 

The post Cronos Confirms $9.19 Million Remains Missing Following Tectonic Exploit appeared first on 36Crypto.