Cronos Network Halts After $75M Tectonic Exploit

Cryptobriefing

Cronos Network Halts After $75M Tectonic Exploit

First seen 30 Aug 2026, 20:17 UTC • •65.3

Article Content

1 / 25

Browse articles

ThreatCluster •August 31, 2026 at 20:00 UTC

•Cronos halted operations after a $75 million exploit on Tectonic.
•The attacker inflated the price of TONIC by nearly 100 times in 20 minutes.
•Approximately $6 million was bridged to Ethereum before the halt; $60 million remains stranded.

On August 30, 2026, the Cronos blockchain halted operations after an exploit drained approximately $75 million from Tectonic, its largest decentralized lending protocol. The attacker manipulated the price of TONIC, Tectonic's governance token, inflating it nearly 100-fold within 20 minutes. This inflated collateral was then used to borrow real assets from the protocol. Only about $6 million was successfully bridged to Ethereum before the network was paused, leaving an estimated $60 million stranded on Cronos. The incident has raised concerns regarding the stability of decentralized finance (DeFi) systems and the vulnerabilities of low-liquidity tokens. Crypto.com, the parent company of Cronos, confirmed that its exchange and app were unaffected, but the future of Tectonic depositors remains uncertain. Investigations are ongoing, with no timeline provided for resuming operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 45d ago How this analysis works

Timeline

2026-08-30

Cronos Network halted

Validators paused the network after identifying an exploit affecting Tectonic, preventing further asset drain.

2026-08-30

Tectonic exploit reported

The exploit involved manipulating the price of TONIC, allowing the attacker to borrow real assets against inflated collateral.

2026-08-30

Crypto.com reassures users

Crypto.com confirmed that its exchange and app were not affected by the exploit, ensuring customer funds were safe.

More articles in this cluster (24)

Threat Graph

11 entities, 10 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (5)

Cronos Network
Mango Markets
Moonwell
Base
Ethereum

Affected Platform (5)

Cronos
Tectonic
BNB Chain
Linea
Tendermint

Relationships

Data Breach targets Cronos
Data Breach targets Tectonic
Data Breach targets BNB Chain
Data Breach targets Linea
Data Breach related to Cronos Network
Data Breach related to Mango Markets
Data Breach related to Moonwell
Data Breach related to Base
Data Breach related to Ethereum
Data Breach related to Tendermint

Following this threat?

Track Cronos Network in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…

Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…