Cronos halts network after Tectonic exploit hits $75M
Cronos halts network after a Tectonic lending protocol exploit drained an estimated $75 million on Sunday, August 31, 2026. Cronos Labs paused its blockchain after identifying the attack, while Tectonic warned users not to interact with the protocol. Crypto.com's app and exchange were unaffected and continued operating normally, CEO Kris Marszalek confirmed.
Key Takeaways
- Cronos halted its blockchain after an exploit targeting decentralized lending protocol Tectonic.
- Researcher Weilin Li estimated roughly $75 million in losses, with most funds still on the Cronos network.
- The attacker used a pump-and-borrow scheme exploiting TONIC's 20% collateral factor and thin liquidity.
- Crypto.com's app and exchange were unaffected; Marszalek said user funds there were safe.
- Neither Cronos nor Tectonic has announced a network restart timeline or confirmed the full loss amount.
What happened in the Tectonic exploit on Cronos?
On Sunday, Cronos said it identified an exploit in Tectonic and halted the network, promising updates as the situation developed. Tectonic separately warned users not to interact with the protocol while it investigated the breach.
Neither project has confirmed the cause of the attack or the total loss at publication. No restart timeline had been announced at the time of writing.
The incident marks one of the largest DeFi exploits on the Cronos chain in recent months. For ongoing coverage of similar incidents, see our Fintech & Crypto Alerts hub.
How did the attacker drain an estimated $75 million?
Researcher Weilin Li said the attacker exploited TONIC's 20% collateral factor and thin liquidity in what he described as a "Mango-market style" pump-and-borrow attack. The attacker pumped the governance token's price roughly 100-fold within 20 minutes before borrowing other assets against the inflated collateral.
Li initially estimated $66 million was affected. He said the attacker bridged about $6 million to Ethereum before the network halt, leaving $60 million on Cronos. Li later identified another attacker-controlled address holding about $8 million, bringing his estimated total loss to roughly $75 million.
Full details are still emerging. Cointelegraph first reported the network halt and researcher estimates on August 31, 2026.
Are Crypto.com users affected by the network halt?
Crypto.com CEO Kris Marszalek said the company's app and exchange were unaffected by the Tectonic breach and continued operating normally. He added that funds held on Crypto.com were safe.
The network halt applies to the Cronos blockchain itself, not to Crypto.com's centralized products. Users relying on Cronos-based DeFi protocols, however, face frozen transactions until the chain resumes.
What happens next for Cronos and Tectonic?
Cronos and Tectonic have not said whether they will restrict the attacker's addresses, recover the bridged assets, or compensate affected users. Both projects were contacted for comment but had not issued further public statements at publication.
With most of the estimated $75 million still sitting on Cronos addresses, the halt gives developers time to assess recovery options. Users should avoid interacting with Tectonic until the protocol issues an all-clear.