Cronos, the blockchain first built by Crypto.com, stopped producing blocks on 30 August after an attacker drained about $75 million from Tectonic, the largest lending market on the chain. The security researcher Weilin Li traced the loss to two addresses, roughly $66 million from one and $8 million from the other, and estimated that only around $6 million was bridged to Ethereum before the chain stopped.
The method was not new. The attacker drove the price of TONIC, Tectonic’s lightly traded governance token, up about a hundredfold in twenty minutes, deposited the inflated holding as collateral, and borrowed other assets against it. Li compared it to the 2022 Mango Markets attack, which followed the same steps. Tectonic’s total value locked fell from about $121 million on 26 August to roughly $3 million by Monday, according to DefiLlama.
Halting the whole network to contain a single application is the part worth sitting with. A chain that its operators can switch off when something goes wrong is easier to defend in a crisis and harder to describe as decentralised the rest of the time. Crypto.com’s exchange and its main app kept running throughout, and the company’s chief executive said its security staff were assisting with the response.
By 31 August Cronos had not given a restart time, confirmed the size of the loss, or said whether Tectonic depositors would be made whole. Around $68 million of the stolen funds was still sitting on the halted chain, which leaves a question the team has not addressed in public: whether a coordinated restart could recover any of it, and what doing so would say about how final the ledger is.
