Cronos network halts after $75M Tectonic exploit drains lending protocol

The Cronos blockchain ground to a halt on August 30 after an attacker manipulated the price of Tectonic’s TONIC governance token roughly 100x in about 20 minutes, then borrowed against the inflated collateral to drain an estimated $66M to $75M from the network’s largest independent lending protocol. Validators moved quickly to freeze the chain, stranding approximately $60M of the stolen value on Cronos itself. Only about $6M was reportedly bridged to Ethereum before the shutdown. How the exploit worked Researcher Weilin Li identified the attack as a price-manipulation exploit in the mold of the infamous Mango Markets incident from 2022. The playbook is disturbingly familiar: find a token with thin liquidity, pump its price through aggressive buying, then use the artificially inflated holdings as collateral to borrow real assets from a lending protocol. Once TONIC’s price was sufficiently inflated, the attacker deposited their holdings into Tectonic as collateral and borrowed against them. The protocol’s oracle, which tracks token prices to determine collateral values, apparently accepted the manipulated price as legitimate. The attacker then drained lending pools of more stable and...