Cronos network halted after a $75M price-manipulation attack on Tectonic lending protocol; attacker inflated TONIC token price ~100x to borrow assets, with $6M extracted before the halt.
Security & Exploits ·
The Cronos blockchain halted following a price-manipulation attack on the Tectonic lending protocol. An attacker inflated the price of the illiquid TONIC token roughly 100x to borrow approximately $75M in other assets, with about $6M bridged out before the network paused operations.
The exploit relied on artificially moving TONIC's price to artificially inflate collateral value within the lending protocol. Once the attacker deposited the inflated collateral, they borrowed substantially against it before the network intervention. The mechanism highlights how illiquid assets and price-feed vulnerabilities can be leveraged in DeFi lending markets.
It remains unclear how the attacker will attempt to move remaining funds, whether Cronos will resume normal operation, and what recovery mechanisms may be available to affected users and the protocol. The extent of user losses and whether insurance or compensation mechanisms exist have not been specified.