stable coins
By Jean-Luc Maracon
1 / 15
Moonwell's MAMO Market Cracked First. Days before Tectonic, Moonwell's MAMO lending market on Base got hit with essentially the same…
2 / 15
A Playbook That Goes Back to Mango Markets. Neither of these attacks came out of nowhere. Back in 2022, Avraham Eisenberg ran a nearly…
3 / 15
Two DeFi lending platforms just took a combined hit of more than $84 million. The culprit in both cases: price manipulation targeting thinly traded tokens used as collateral.
4 / 15
The bigger of the two blows landed on Tectonic, a lending protocol running on the Cronos blockchain.
5 / 15
$6 million already gone before Cronos could react.
6 / 15
The root problem at Moonwell was straightforward, if painful: the protocol priced MAMO collateral using an illiquid market.
7 / 15
Pretty much the same story at Tectonic. Different chain, different token, same structural weakness.
8 / 15
Neither of these attacks came out of nowhere. Back in 2022, Avraham Eisenberg ran a nearly identical operation against Mango Markets, manipulating MNGO token prices to pull out…
9 / 15
Related: Cronos Network Freezes After $75 Million Tectonic Exploit — Can Crypto.com Recover?
10 / 15
The core vulnerability hasn't changed: DeFi lending protocols that let thinly traded tokens serve as collateral will automatically adjust borrowing limits when those token prices…
11 / 15
That's the gap. It's been known for years. It's still being exploited.
12 / 15
Broader DeFi lending markets have grappled with oracle-related risks since at least the early 2020s, and the industry has developed various approaches — time-weighted average…
13 / 15
Read also: Bitwise Moves $15.4 Million in XRP as Price Dips to $1.30
14 / 15
The Moonwell and Tectonic attacks didn't require sophisticated zero-day exploits or novel cryptographic tricks.
15 / 15
Cronos's network remains halted as of the latest available information, with no public statement on when normal operations resume. Tectonic hasn't published a full damage report.
The Currency Analytics
Want the full story?