Cronos Restarts After $74M Tectonic Exploit

Cronos has resumed block production after an attack on the Tectonic lending platform used manipulated token prices to secure roughly $74 million in borrowed assets.

The network paused operations after detecting the incident, freezing transactions while validators restored the chain to a point before the exploit. Cronos said the network is now online again and remains under close observation.

Attacker inflated TONIC token price

The Tectonic exploit centred on the platform’s TONIC token. The attacker reportedly pushed its price about 100 times higher in just 20 minutes, then used the artificially inflated tokens as collateral to borrow other digital assets.

Tectonic is a decentralised finance lending protocol on Cronos. Users can deposit cryptocurrency and borrow against the value of the assets they place as collateral.

Blockchain security firm PeckShield said the attacker borrowed around $74 million in total. However, it estimated that only about $6 million worth of Ethereum was successfully removed, while most of the funds remained trapped on the Cronos network.

Cronos halted the network to protect users

Cronos halted blockchain activity shortly after the exploit came to light. The emergency action stopped transactions that were still in progress and gave validators time to respond.

The network later restored its state to before the Tectonic exploit. Cronos said block production restarted at 23:49:01 UTC on 30 August 2026, beginning from block 90,896,189.

Cronos described the response as a validator-consensus emergency measure intended to protect users and limit the impact of the attack.

Tectonic’s locked value drops sharply

Before the incident, Tectonic was Cronos’ largest lending protocol, with around $122 million held on the platform.

Its total value locked has since fallen to just under $3 million. Tectonic previously said it was investigating the incident and urged users not to interact with the protocol until it confirmed that the service was safe.

Cronos said it is monitoring the restarted network for stability, compatibility issues and other potential problems. The platform also plans to publish a post-mortem report with further details about the Tectonic exploit.