The Cronos blockchain was halted this week after an attacker exploited the Tectonic lending app, draining roughly $75 million in real assets. The exploit worked by inflating the TONIC token 100-fold, then using that inflated collateral to borrow real assets. Validators paused the network, which left most of the stolen funds stranded.
How the attacker inflated TONIC
The attacker inflated TONIC's price by 100 times, then used the overvalued token as collateral to borrow real assets from Tectonic's lending pools. The scheme worked because the inflated collateral value let them withdraw more than they should have. Tectonic is a lending protocol on Cronos, and the exploit targeted its core mechanism.
Why validators hit pause
Validators paused the network to stop the bleeding. The halt froze all transactions on Cronos, including the attacker's ability to move the borrowed assets. It's a blunt but effective way to contain the damage, though it also freezes legitimate activity on the chain.
What the halt means for users
With the network down, users can't make deposits, withdrawals, or trades. Funds sitting in wallets and smart contracts are locked in place. The pause is a drastic step, but it may be the only way to prevent further losses.
Funds stranded
The pause left most of the stolen assets stuck on the network. The attacker couldn't move them out before the halt, so the bulk of the $75 million remains frozen. That's cold comfort for the victims, but it means the funds aren't gone — at least not yet.
The halt is ongoing, and there's no word yet on when Cronos will resume normal operations. For now, the network is down, and the stolen funds are sitting in limbo.
