The Cronos blockchain network has restarted its trading activities after a price-manipulation incident involving the Tectonic cryptocurrency lending platform, which enabled an attacker to borrow $74 million.
Recent reports indicate that the perpetrator artificially boosted the price of Tectonic’s TONIC token by a factor of 100, subsequently using it as collateral to secure real assets. This price manipulation occurred within a span of 20 minutes.
Although the exploit resulted in a significant amount of funds, the attacker was only able to steal approximately $6 million worth of Ethereum, with the remainder of the assets being “stuck” on Cronos, according to blockchain security and data analytics firm PeckShield.
Cronos is a blockchain network similar to Ethereum and is linked to Crypto.com, while Tectonic operates as a decentralized finance (DeFi) lending application on Cronos.
Prior to the incident, Tectonic was the largest lending protocol on Cronos, managing $122 million, and allowed users to deposit cryptocurrency and borrow against the assets they provided as collateral.
Following the event, the total value locked, as reported by DeFiLlama, has fallen to just under $3 million.
Yesterday, Tectonic announced it was investigating the situation and advised users to refrain from interacting with the protocol until it could confirm the platform’s safety.
Cronos acted swiftly upon detecting the exploit, pausing the blockchain’s operations and freezing all ongoing transactions at that moment.
Earlier today, Cronos announced the network’s restart, informing users that it “is producing blocks again and is fully back online.”
“This was an emergency action taken by validator consensus to safeguard users from an exploit on the Tectonic protocol,” stated Cronos.
“The chain state has been reverted to its status prior to the Tectonic exploit that occurred this morning. Cronos resumed block production as of 2026-08-30 23:49:01 UTC, starting from block 90,896,189.”
The blockchain is currently under close observation for stability, compatibility with protocols, and other potential issues.
The platform also mentioned that it would release additional information regarding the exploit in a forthcoming post-mortem report.
Once attackers gain valid credentials, only 37% of their actions are prevented. Overall prevention metrics can obscure what transpires after initial access. Once attackers are operating with valid credentials, the effectiveness of prevention measures declines significantly.
The Blue Report 2026 evaluates defense techniques through 338 million simulations conducted in customer production environments.
Get the report
Source: Original article
