Cronos reports $9.19 million unrecovered after Tectonic exploit and chain rollback
What happened
Cronos, the blockchain built by Crypto.com, confirmed that about $9.19 million left its network during an exploit on August 30 and could not be recovered after the chain was rolled back.
Key numbers
- Attacker borrowed $120.4 million using manipulated collateral.
- Rollback restored roughly $111.2 million.
- $9.19 million (7.6 % of the affected funds) remained off‑chain.
- The rollback erased 1 hour 54 minutes of history (10,961 blocks).
Attack details
The attacker inflated the price of TONIC, the governance token of the Tectonic lending protocol, and then borrowed $120.4 million across nine markets. The malicious activity was detected about 36 minutes after it began, prompting validators to halt the network at block 90,907,150.
Rollback and recovery
Validators agreed to roll the chain back to block 90,896,188, the last block before the exploit. This restored balances to their pre‑attack state, reversing $111.2 million. However, $9.19 million had already been transferred out and could not be restored.
Current status
Block production resumed roughly 11 hours after the attack, and the block explorer, indexers, subgraphs, and public RPC endpoints are operational. Cronos is working with exchanges, bridges, and other platforms to reconcile the unrecovered funds. No action is required from users at this time.
