Cronos says $9.19M remains unrecovered after Tectonic exploit

Cronos said $9.19 million is still missing following the Tectonic lending exploit, even after a validator-approved rollback restored about $111.2 million. The incident began on Aug. 30, when an attacker manipulated Tectonic’s collateral mechanics by inflating the price of TONIC, the protocol’s governance token. With TONIC’s liquidity thin, the attacker was able to distort the token’s valuation, boost the apparent value of deposited collateral, and roughly 10 minutes later borrow $120.4 million across nine markets. Cronos said it detected suspicious activity around 36 minutes after the exploit and moved with validators to contain the damage. Validators halted the chain at block 90,907,150 and agreed to roll back state to block 90,896,188, the last block before the attack. The rollback removed 10,961 blocks—about 1 hour and 54 minutes of activity—and reversed roughly $111.2 million in unauthorized borrowing. Cronos said the intervention prevented the attacker from retaining most of the assets tied to the manipulated collateral position, but could not claw back funds already moved through bridges, exchanges, or other networks. Around $9.19 million—about 7.6% of the total impacted amount—left the system before operations were halted. The rollback also voided legitimate transactions executed during the affected window, meaning some users with activity unrelated to Tectonic saw their transactions reversed as the network returned to an earlier state. Cronos said the decision required weighing transaction finality against the risk of substantial fund losses. Block production resumed roughly 11 hours after the incident began. Cronos said it restored network services including its block explorer, indexers, subgraphs, and public RPC endpoints, and is working with exchanges, bridges, and impacted platforms to reconcile transactions erased by the rollback. Cronos’ postmortem did not identify the attacker or outline a recovery plan for the remaining $9.19 million. CRO, the network’s native token, was up 0.62% over 24 hours, trading near $0.058 after the update.