Overview
- Validators halted Cronos during a price-manipulation attack on Tectonic and then restarted the network from block 90,896,189 after erasing the transactions tied to the exploit.
- Researchers traced a Mango-style pump-and-borrow scheme that inflated Tectonic’s governance token TONIC about 100x in roughly 20 minutes and used the inflated tokens as collateral to borrow large sums.
- On-chain analysts estimate the attacker drained between $66 million and $75 million from Tectonic, though Tectonic has not published a final accounting.
- Only about $6.0–$6.3 million escaped to Ethereum before validators halted the chain on Sunday, Aug. 30, while the bulk of attacker-controlled assets were frozen or removed by the rollback.
- The incident highlights risks from listing thinly traded governance tokens as collateral, raises questions about finality in a 100-validator Tendermint system, and leaves unresolved whether depositors will be made whole or bridged funds can be recovered.