tectonic

Tectonic was attacked for $120 million; what’s truly terrifying is those 83 seconds

The DeFi lending protocol Tectonic on the Cronos chain was hit by a price-oracle manipulation attack. In a transaction initiated at 12:49:39 UTC, the attacker borrowed and re-posted TONIC collateral 98 times in a loop, driving the collateral’s quoted value up by nearly 200x. Then, using that inflated quote, they borrowed assets with a nominal value of $120.4 million from nine lending markets, involving USDC, USDT, WBTC, and WETH.

Oracle manipulation isn’t a new trick in DeFi—what’s really worth discussing is the timeline of the stolen funds’ escape. First, the attacker bridged about $6.3 million USDC to Ethereum and converted it into ETH. The remaining assets were swapped into CRO on Cronos. In 28 batches, they transferred the funds out via the same bridge, and the final batch was fully settled at 14:31:24 (UTC). At 14:32:47 (UTC), Cronos validator nodes paused the network and rolled back the chain state. The two events were separated by only 83 seconds.

Those 83 seconds show two things: first, the attacker was clearly mindful of tracking, moving funds in batches and quickly converting them into mainstream assets—plainly racing against time to launder money; second, keeping the remaining assets intact was more about response speed and luck than any safety margin deliberately built into the protocol. If the validators had responded even a few minutes later, the gap that couldn’t be recovered—$9.19 million—might well have become the full $120 million fleeing in one go. At present, Tectonic’s supply and borrowing functions are paused; withdrawals and repayments are operating normally. The relevant parties are tracking the funds and applying to freeze stablecoins.

Cronos managed to save most of the assets this time with “pausing the network + rolling back the chain state,” but this also shows that, in critical moments, this chain can be collectively halted and history rewritten by the validator set.

What do you think of this kind of “chain-level rollback” rescue approach—responsible emergency handling, or something that will make people doubt the “immutability” of on-chain assets again?

#Tectonic #Cronos #TONIC #DeFi安全 #预言机攻击

📰 On August 30, Tectonic suffered a collateral price manipulation attack involving roughly $120 million in borrowing. Cronos validators paused the network at 10:32 PM Beijing time and rolled back the on-chain state to the block before the attack. Block production resumed at 7:49 AM the next day.

🔥 This move is indeed direct: about $111 million in funds was recovered, and ultimately about $9.19 million flowed out before the pause and was not recovered—around 7.6%. Judging by the outcome, most of the losses were contained, and the response was very fast.

Honestly, what would actually spark arguments in the community is the question of whether validators can roll back on-chain state to recover funds. Affected users naturally want their money back, but others will also reassess: under what circumstances can this chain be paused, and who has the power to push for a rollback.

⚠️ The official statement says users currently don’t need to take any action, and cross-platform settlements are still progressing. It also specifically reminds users to watch out for phishing links impersonating the official. If someone suddenly messages you in private at this stage and asks you to connect your wallet or claim compensation, just don’t click—at least for now.

🤔 If a rollback can recover 90% of the funds, but it also shows that on-chain history can be rewritten, which matters more to you: getting losses back, or the principle that once a transaction is confirmed, it can’t be undone?

#Cronos #Tectonic #链上安全 #DeFi

📰 The Cronos lending protocol Tectonic disclosed an attack report from August 30: the attacker manipulated the price of TONIC to about 195x, then used looping collateral to borrow roughly $120.4 million from 9 lending markets.

🔥 This wasn’t just a sudden crash—it was oracle price and collateralized borrowing being exploited together. Honestly, seeing the “195x” figure pretty much explains why the lending markets were quickly drained.

💡 Cronos then paused the network and restored operations; most assets returned to their pre-attack state. But some funds have already been bridged out—around $9.19 million hasn’t been recovered yet, which is the most unsettling part of this incident.

Actually, the project team has already outlined the next steps: remove collateral with lower liquidity, and set borrowing limits for each market. This can reduce the room for similar operations, but whether it can completely plug the problem will depend on how effective the new rules are once implemented.

🤔 Do you think lending protocols should prioritize restricting low-liquidity collateral, or first cap borrowing in a single market?

#Tectonic #Cronos #DeFi安全 #On-chain Attack

LARGEST CRYPTO HACKS IN Q3 2026

#LiquidNetwork #Tectonic #COLDCARD #Nesa #AFX #Ostium #BonkDAO #Wanchain #KiiChain #TripleA #Moonwell #TermFinance #Coinsbuy #TAC #Fogo

In August, the encryption industry saw a total of 50 major hacker attacks, a 67% month-over-month increase.

#Cronos #Tectonic #ETH

Cronos confirms $9.2 million was withdrawn before Tectonic issues were fixed

- Cronos published a report after the Tectonic mining incident (post-mortem).
- The borrowed amount affected totals up to $120.4 million.
- Of that, 7.6% (equivalent to $9.2 million) was moved out of the network before the validators intervened.
- The RSS source has not provided any further details on remediation measures or compensation plans.

#Cronos #Tectonic #CryptoNews #DeFi #Security

$cro

vlikevn Titanbot

Source: CoinTelegraph

Cronos loses $9.2 million after the Tectonic exploit; the rollback doesn’t recover everything

- After the Tectonic security breach, Cronos performed a rollback of roughly $111.2 million.
- However, $9.19 million left the chain and cannot be recovered.
- The remaining amount has not yet been restored by the recovery team.
#BinanceSquare #CryptoNews #Cronos #Tectonic

$cro

#vlikevn Titanbot

Source: The Block

🚨 CRONOS HALTS ITS ENTIRE NETWORK AFTER A $75M TECTONIC EXPLOIT 😱

A major DeFi security incident has just hit the Cronos ecosystem.

Tectonic, one of the largest lending protocols on Cronos, was exploited in an attack currently estimated at around $75 MILLION.

Here's how the attack allegedly happened 👇

1️⃣ $TONIC was pushed roughly 100x higher in about 20 minutes

2️⃣ The attacker used the artificially inflated $TONIC as collateral on Tectonic

3️⃣ They borrowed valuable assets against that inflated collateral

4️⃣ Around $75M in assets are estimated to have been affected

⚠️ Then came the unusual part:

Cronos validators halted the entire blockchain.

The move appears to have prevented most of the affected funds from leaving the network.

Only around $6M reportedly reached Ethereum before the halt.

📉 Before the incident, Tectonic had approximately:

• $121.7M in TVL
• $82.7M in active loans

Its TVL has since collapsed dramatically. (CoinDesk)

But there's still a BIG question:

👉 Can the remaining funds be recovered?

The $75M figure is still an estimate. Cronos and Tectonic have not yet confirmed the final loss or released a complete root-cause analysis. (Cointelegraph)

This incident highlights one of DeFi's biggest risks:

Thin liquidity + inflated collateral valuations can become extremely dangerous.

What do you think?

🔴 Major warning for Cronos
🟡 A protocol-specific failure
🟢 Funds can still be recovered

Follow Crypto Pulse Daily for the biggest crypto stories without the hype.

#Cronos #CRO #Tectonic #TONIC #DeFi

🚨 Cronos network pauses operations after a security breach

The Cronos network announced a temporary halt to its operations following a security exploit targeting the Tectonic financial platform, resulting in losses estimated at around $75 million. Reports indicated that most of the assets controlled by the attacker are still present on-chain.

━━━━━━━━━━━━━━
📊 Impact: 🔥 Very high
🏷️ DEFI

#Cronos #Tectonic #DeFi #Exploit #Security

📰 Source: cointelegraph.com