Tectonic attacker exploited manipulated TONIC collateral to borrow $120.4M; Cronos chain rollback recovered $111.2M but $9.19M remains unrecovered.
Security & Exploits ·
A Tectonic lending protocol exploit on Cronos resulted in approximately $111.2 million in losses, though a subsequent chain rollback recovered most of those funds. However, $9.2 million had already been transferred off the chain before the rollback could reverse the damage, leaving that portion unrecovered.
The mechanics of the incident involved funds being moved across the chain boundary during the window between the exploit and the network's intervention. The rollback successfully restored the majority of user balances by reverting transactions to a state before the attack, but it could not retrieve assets that had already exited the Cronos ecosystem.
The distinction between recovered and unrecovered amounts highlights a key limitation of chain rollbacks as a recovery tool: once assets leave the network, reversing on-chain state cannot restore them. Whether the $9.2 million can be recovered through other means—such as cross-chain coordination, law enforcement action, or exchange cooperation—remains unclear.