Cronos Network Halts After $75M Tectonic Protocol Exploit

Cronos blockchain was forced to halt operations on Sunday after a major exploit targeting the decentralized lending protocol Tectonic resulted in an estimated $75 million in losses, with the majority of stolen funds still sitting on the Cronos network at the time of writing. Cronos announced it had identified the exploit in Tectonic and paused the network to contain the damage, promising further updates. Tectonic separately urged users not to interact with the protocol while its team investigated the incident. Neither project confirmed the root cause or final loss figure, and no timeline for restarting the network had been announced as of publication.

Blockchain researcher Weilin Li provided the most detailed account of the attack, explaining that the exploiter manipulated TONIC's 20% collateral factor combined with thin liquidity to inflate the governance token's price roughly 100-fold within just 20 minutes. The attacker then used the inflated collateral to borrow other assets on the platform in what Li described as a "Mango Market-style" pump-and-borrow attack. Li initially estimated $66 million was affected before later identifying a second attacker-controlled address holding approximately $8 million, bringing the revised total to around $75 million. Roughly $6 million was bridged to Ethereum before the network was halted, while the remaining $60 million stayed on Cronos.

Crypto.com CEO Kris Marszalek moved quickly to reassure users, confirming that the company's app and exchange were unaffected by the Tectonic breach and continued operating normally, with all funds on those platforms remaining safe. Cronos and Tectonic have not publicly stated whether they plan to restrict the attacker's addresses, pursue asset recovery, or compensate affected users. The incident highlights ongoing security vulnerabilities in DeFi protocols and comes amid heightened scrutiny of cross-chain bridges and lending platforms following similar exploits throughout 2026.