Cronos, the blockchain launched by Crypto.com, was paused by its validators after an attacker allegedly manipulated the thinly traded TONIC token to borrow real assets from the Tectonic lending app, according to CoinDesk . The incident is the latest in a string of collateral-price exploits and has left an estimated $75 million in losses unaccounted for while the network stays halted. It marks one of the more consequential shutdowns for the chain, which Crypto.com holds up as the center of its ecosystem.
How the Attack Unfolded
Tectonic accepted TONIC, its own token, as collateral even though the asset held only about $1.34 million in liquidity and roughly $11,000 in daily trading volume. Blockchain data shows an attacker pushed the price up roughly 100-fold in about 20 minutes, deposited the suddenly more valuable tokens and borrowed other assets against them. With a 20% collateral factor, every $100 of recognized value could support about $20 of borrowing. Tectonic’s own documentation warns that low-liquidity assets can be particularly susceptible to price manipulation, and its last public posts before Sunday dated back to June and May, when it was warning users to withdraw one asset and trimming how much could be borrowed against others.
Validators Pause the Network
Cronos runs on software capped at 100 validators, few enough to coordinate a shutdown within minutes. Tectonic held about $121.7 million in locked assets on August 26, close to half of all capital in Cronos DeFi, but that figure had fallen to roughly $3 million by Monday. The move mirrors BNB Chain’s October 2022 halt, when 26 validators stopped the network after a bridge exploit and recovered close to $470 million of the roughly $570 million taken. The trade-off is that everyone else’s funds stop moving too.
What Remains Unresolved
Cronos and Tectonic had not published a restart timetable or a confirmed accounting of losses as of Monday morning. The attack follows a similar exploit at Moonwell on Base last week and about $36 million of liquidations on Morpho after a thin Pendle market moved sharply. It also lands shortly after other Cosmos-based chains were urged to halt after an exploit , showing how low-liquidity collateral can be weaponized across lending markets.
