Cronos Confirms $9.19 Million Lost Before Rollback Following Tectonic Exploit
The Layer-1 blockchain Cronos has officially confirmed that $9.19 million left its network before validators halted operations following the Tectonic protocol exploit. Approximately $111.2 million of the $120.4 million manipulated borrowing was reversed through a rollback to restore pre-exploit balances, leaving 7.6% of the affected funds outside the network. This disclosure clarifies the incident’s scale, which exceeds earlier estimates of $75 million, and highlights a significant transfer of assets off the Cronos blockchain.
Scale of Stolen Funds and Rollback Procedure
In its post-mortem report published Tuesday, Cronos detailed that manipulated collateral values drove about $120.4 million in borrowing activity. The network rollback restored approximately $111.2 million worth of balances to their pre-exploit state, effectively reversing nearly 92.4% of illicit funds obtained through the exploit.
However, about $9.19 million, representing 7.6% of the total exploited amount, was not reversed and left the blockchain. This official accounting confirms the extent of unrecovered funds following the incident.
Previous Estimates and Transactional Details
Earlier estimates valued the affected amount at around $75 million, but the official figures released by Cronos reveal a significantly larger impact. Additionally, the $9.19 million moved off the Cronos network exceeds the previously traced $8.3 million identified by blockchain analytics firm Bitquery.
According to Cointelegraph, a single transaction emptied nine Tectonic lending markets through 11 transfers involving stablecoins, Bitcoin, Ether, and other assets.
Attack Mechanism and Price Manipulation
Bitquery's analysis showed the attacker started by depositing $5 million, then repeatedly borrowed and redeposited the native TONIC token through a 98-cycle loop, purchasing the token simultaneously.
These actions drove TONIC’s price up nearly 300-fold, exploiting Tectonic’s price feed that followed the token’s market price, thereby enabling manipulation to extract illegitimate loans.
Validator Actions and Network Recovery
Cronos reported that Tectonic detected the suspicious activity at 12:49 UTC on August 30. Validators halted the network at 14:32:47 UTC to contain damage.
Block production resumed at 23:49:01 UTC once balances were rolled back to their pre-exploit state, ensuring the temporary network suspension prevented further losses and enabled recovery of most assets.
Why it matters
Revealing precise figures regarding fund loss and rollback procedures is critical to fully comprehend the true scale of the Cronos Tectonic exploit and its impact on protocol participants. Clarifying the stolen amount and halting manipulative operations demonstrates the community’s effective response measures while highlighting vulnerabilities inherent in decentralized finance protocols. This information aids investors and users in assessing platform risks and encourages the industry to strengthen security protocols and incident response strategies for future attacks.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗