Crypto Hack: Cronos Freezes Network After Tectonic Attacker Drains an Estimated $75M

Share:
On Aug. 31 Cronos Network halted block production after a DeFi exploit on Tectonic drained an estimated $75 million, leaving roughly $60 million onchain and about $6 million bridged to Ethereum with no restart schedule or depositor compensation announced, disrupting deposits, repayments and liquidations. The attacker allegedly inflated TONIC governance token collateral—using about $600k to push price higher before borrowing assets (USDC, USDT, WBTC, WETH, CRO) in a roughly $120 million extraction—while Crypto.com said its CEX and app remained operational and is assisting the security investigation.
Key Insights:
- Cronos halted block production after a Tectonic crypto hack affected about $75M.
- Roughly $60M remained on Cronos after validators stopped further block production.
- Crypto.com said its app and exchange stayed operational during the Cronos halt.
Cronos Network halted block production after a crypto hack targeted decentralized lending protocol Tectonic. Independent researcher Weilin Li estimated that roughly $75 million in assets were affected during the incident.
Following the halt, no restart schedule or depositor compensation framework had been announced by the time of reporting. However, Tectonic warned users not to interact with the protocol while its investigation continued.
In addition, Crypto.com said its main application and centralized exchange remained operational during the Cronos Network halt.
Crypto Hack Reportedly Used Inflated TONIC Collateral
Li said the attacker exploited TONIC, Tectonic’s governance token, which reportedly carried a 20% collateral factor. TONIC also traded with limited liquidity during the attack.
Li initially said the attacker pushed TONIC’s price roughly 100-fold within about 20 minutes. The attacker then deposited inflated tokens and borrowed other assets from Tectonic.
In addition to the sentiment, a separate account said the attacker purchased about 16 trillion TONIC across three VVS liquidity pools. The purchases reportedly used roughly $600,000 in USDC and CRO, lifting TONIC’s price by about 40%.
The attacker then deposited those tokens into Tectonic, along with about $5 million in USDC. After two test loans, the attacker reportedly executed one transaction involving roughly $120 million.
That transaction allegedly drew USDC, USDT, WBTC, WETH, and CRO from Tectonic’s lending markets. Researcher Awoo estimated that the attacker committed about $5.6 million of personal funds during the operation. Copycat traders later extracted roughly $2 million, according to the same estimate.
Cronos Network Halt Kept Most Funds Onchain
Li first estimated that about $66 million in assets were affected by the crypto hack. He said approximately $6 million reached Ethereum before Cronos Network validators halted block production.
Around $60 million remained at a Cronos address after the chain stopped processing transactions. Li later identified another address containing about $8 million in additional assets.
That discovery raised his combined estimate to approximately $75 million across the identified addresses. However, those amounts remain independent estimates based on address attribution and token values.
The assets remaining on Cronos following the crypto hack incident have not been confirmed as recovered by either project. This comes as Cronos and Tectonic have not announced any transaction reversal or address-freezing plan.
Validators must determine whether the identified wallets can move funds after block production resumes. Tectonic must also account for any bad debt created inside its lending markets.
Deposits, repayments, liquidations, and withdrawals remain disrupted while Cronos Network remains halted. No confirmed restart time was available as of Aug. 31.
Crypto.com Says Exchange Operations Were Unaffected
Following the crypto hack incident, Crypto.com CEO Kris Marszalek stated that Crypto.com’s application and centralized exchange continued to operate throughout the Cronos Network interruption.

He said the company’s security team was also assisting with the investigation into Tectonic. His statement covered assets held through Crypto.com services, not funds deposited directly into Tectonic.
However, the crypto hack is still under investigation, while Tectonic operates independently as a decentralized lending application on Cronos. Marszalek also committed to publishing a full post-mortem after investigators complete their review.
The post Crypto Hack: Cronos Freezes Network After Tectonic Attacker Drains an Estimated $75M appeared first on The Coin Republic.
Read More






