Cronos Validators Roll Back Chain to Limit $75M Tectonic Exploit

Cronos validators restored the blockchain to its state before a Tectonic exploit and resumed block production from block 90,896,189 (timestamp 23:49:01 UTC, Aug. 30). The network had been halted on Aug. 30 after the exploit was detected; Cronos announced the restart in an Aug. 31 update.

Validators and security teams paused the chain while investigating the incident. Cronos said the chain is fully back online but warned that some connected services, including protocols, RPC providers, block explorers and bridges, may require more time to return to normal operation.

Onchain researcher Weilin Li attributed the attack to manipulation of TONIC, Tectonic’s governance token. Li’s analysis indicates the attacker inflated TONIC’s price, used it as collateral to borrow assets, and initially estimated about $66 million affected before identifying another attacker-controlled address and revising the figure to roughly $75 million. Li reported about $6 million of the affected funds were bridged to Ethereum before Cronos halted the network.

Node operators were instructed to restart using client version 1.7.8 and updated mainnet snapshots to implement the rollback. Cronos did not detail how reverting the chain will affect transactions that were included during the discarded period. The network said it is monitoring chain stability and plans to publish a full postmortem and an accounting of the incident.

Tectonic posted a notice acknowledging the incident and urged users to avoid interacting with the protocol until it confirms operations are safe. Neither Cronos nor Tectonic has released a confirmed tally of losses, a formal root-cause analysis or a plan for handling assets controlled by the attacker.

Crypto.com confirmed its app and exchange, which operate separately from the Cronos public chain, were not affected. CEO Kris Marszalek reported that those services were operating normally and that the company dispatched security staff to assist Cronos.

Cronos said the forthcoming postmortem and the pace at which bridges, explorers and other infrastructure recover will shape the final accounting of losses and when Tectonic depositors can safely resume activity.