Cronos halted its blockchain on Sunday after an exploit hit Tectonic, its largest lending protocol. Experts estimated roughly $75 million in assets were affected. The network hasn't said when it will resume, or what will happen to the attacker's funds.
How the attack worked
The attacker pulled off a Mango Markets-style pump-and-borrow price manipulation. They targeted TONIC, Tectonic's governance token, which has a 20% collateral factor despite very thin liquidity. That let the attacker inflate TONIC's price 100-fold within 20 minutes, then borrow against it.
On-chain tracking platform LookonChain reported the attacker only managed to bridge $6.29 million to Ethereum, swapping it for 2,592 ETH before the network was halted. The remaining $68.7 million is stuck on Cronos. Researcher Weilin Li linked the attack to TONIC's collateral factor, which allowed the price spike to be used as collateral.
Cronos response
Crypto.com CEO Kris Marszalek confirmed the security breach and said the Cronos team was investigating. The Cronos app and exchange were not affected and continued operating as usual. Marszalek asserted that all funds were safe.
But the blockchain has not said what will happen to the assets tied to the attacker once the chain restarts. No timeline has been given for that restart.
A pattern of thin-liquidity attacks
This isn't an isolated incident. Moonwell, a lending protocol on the Base network, lost over $8 million last week after an attacker manipulated the collateral price of MAMO, a small-cap token with thin liquidity. Moonwell cut borrow caps for all Core Markets on Base to 1 wei, effectively stopping new borrowing across the deployment. It also reduced supply caps for MAMO and WELL to 1 wei.
Another recent case involved a low-liquidity Pendle market, where price manipulation led to about $36 million in liquidations of leveraged PT-reUSD positions on Morpho.
Tectonic's collapse
The exploit hit Tectonic hard. Its locked assets dropped from around $121 million on August 29 to roughly $3 million two days later. That's a 97% collapse in a matter of days.
The question now is whether Cronos can restore the network and what happens to the stuck funds. The team hasn't said.
