Bitcoin News

Story: $9.19 Million Vanishes from Cronos Amid Tectonic Exploit Fallout

By Bruce Buterin

1 / 15

How the Attack Actually Worked. The mechanics here are worth slowing down on, because they're not simple.

2 / 15

What the Rollback Did — and Didn't — Fix. The rollback worked. Mostly. Getting $111.2 million back is genuinely significant, and it's…

3 / 15

Cronos put a hard number on it Tuesday. Nine-point-nineteen million dollars left the blockchain before validators could stop the Tectonic exploit — and it's now clear the damage…

4 / 15

The post-mortem report Cronos dropped Tuesday is pretty blunt. Manipulated collateral values drove $120.4 million in borrowing activity during the incident.

5 / 15

The mechanics here are worth slowing down on, because they're not simple. Per the Cronos report and data from blockchain analytics firm Bitquery, the attacker started by…

6 / 15

One transaction alone emptied nine Tectonic lending markets. That single move involved 11 transfers across stablecoins, Bitcoin, Ether, and other assets.

7 / 15

Tectonic caught the exploit at 12:49 UTC on August 30. Validators halted block production at 14:32:47 UTC — roughly an hour and forty-three minutes after detection.

8 / 15

The rollback worked. Mostly. Getting $111.2 million back is genuinely significant, and it's probably not what the attacker expected.

9 / 15

Read also: Harmony Proposes Shutdown and Migration to Ethereum Following 109,000-Transaction Exploit

10 / 15

But $9.19 million didn't come back. That money cleared the network before the halt, and once funds move off-chain in an exploit like this, recovery basically depends on exchange…

11 / 15

The TONIC price manipulation was the core vulnerability, and it's not a new category of attack.

12 / 15

Cronos' report doesn't sugarcoat the collateral management gap. The platform's price feed followed the manipulated TONIC price without flagging it as anomalous.

13 / 15

For lending protocols specifically, this kind of attack is a known risk. The challenge is that tighter collateral rules and more conservative price feeds can also make platforms…

14 / 15

More context: Fomo Dapp Surpasses Pump.fun with $1.76M Daily Revenue on Solana

15 / 15

The Bitquery data that initially surfaced on Ethereum pegged the off-chain transfer at a different figure. Cronos' post-mortem now sets the confirmed number at $9.19 million.

The Currency Analytics

Want the full story?