๐จ $120 million stolen!
Cronos urgently rolled back the blockchain for nearly 2 hours, but the $9.19 millionโcan it really never be recovered?
Group:
็นๅป่ฟๅ
ฅ็็็็ฒไธ็พคIn this latest Cronos Tectonic vulnerability incident, the final loss amount turned out to be far larger than the number initially disclosed. According to Cronosโs newest post-mortem report, the attacker used a manipulated TONIC price to treat the inflated tokens as collateral, borrowing about $120.4 million across multiple Tectonic markets.
Whatโs most shocking is that the TONIC price surged by roughly 100x in a short time.
But what really stunned the market wasnโt just the vulnerability itselfโit was the decision Cronos made afterward. Validators directly stopped block production and rolled back 10,961 blocks, equivalent to about 1 hour and 54 minutes of transaction history. Through this rollback, roughly $111.2 million of the affected value was restored.
However, the question is:
$9.19 million has already been transferred out of the Cronos network. This portion of funds canโt be recovered by rolling back on-chain state, which also means the $9.19 million is still currently in an โunrecoveredโ status. The mostๅผๅพๅ
ณๆณจ (most worth paying attention to) in this incident is actually the attack method. It isnโt a simple โoracle error.โ The attacker manipulated TONICโs market price itself, and Tectonic previously allowed this kind of low-liquidity asset to be used as collateral. In other words, the price looks very high, but that doesnโt mean the market truly has enough liquidity to sell the assets at that price.
This exposes a very real problem in DeFi lending protocols:
Price โ Liquidity. If a token has extremely low liquidity but can still obtain large loans at a price that gets pushed up in a short time, then once the price is manipulated, the entire collateral system can quickly fall out of balance. Even more intriguing is that while Cronosโs rollback successfully recovered most funds, it also means that many ordinary usersโ transactions during those nearly two hours were wiped out along with it.
This may be the most realistic conflict yet between โblockchain finalityโ and โasset safety.โ
If there were no rollback, the attacker might have taken even more funds;
but by choosing to roll back, the transaction history of ordinary users was erased as well.
Click the avatar to join the Jiu Jiu chat group for daily strategies ๐
#Cronos #CRO #defi