Cronos network halted after $75M Tectonic exploit disrupted its operations severely. The exploit targeted the DeFi lending protocol Tectonic, which led to a complete pause on Cronos’ blockchain processing. Prior to the attack, Tectonic boasted deposits totaling $121.7 million and active loans amounting to $82.7 million. In the aftermath, the attacker managed to bridge approximately $6 million to Ethereum, while about $60 million remained stuck within the Cronos ecosystem.
Tectonic was the largest DeFi lending protocol on the Cronos network, commanding nearly half of all the capital deposited across Cronos DeFi applications. The exploit capitalized on a 20% collateral factor applied to the TONIC token, even amidst its thin liquidity. This approach allowed the attacker to borrow up to a fifth of the asset valuation, leading to a substantial drainage of liquidity. As a result of the exploit, Tectonic’s total deposits and loans, previously amounting to $121.7 million and $82.7 million respectively, plummeted to around $3 million each.
During the attack, about $119.5 million was moved out of the protocol’s pools. However, only $6 million was successfully bridged to Ethereum, while approximately $60 million remained immobilized on the Cronos blockchain. This incident forced Cronos to halt its entire network to prevent further losses and to contain the attack’s impact.
Cronos shut down its entire blockchain to contain the attack on the Tectonic DeFi protocol, freezing every position on the network. Block production stopped shortly after the attacker bridged funds to Ethereum, with about $6 million moved off-chain before the pause. The pause halted further transactions and left significant funds immobilized on Cronos.
A separate on-chain analysis estimated about $119.5 million was moved out of the protocol’s pools during the exploit. Security firm PeckShield estimated the attacker’s haul at about $74 million, with earlier estimates cited around $66 million and later figures near $75 million plus an additional attacker-controlled address holding roughly $8 million. Cronos collaborated with security teams across the industry while assessing the incident.
The chain pause froze all positions and stopped further fund movement while assessments were ongoing. Only a small portion of proceeds reached Ethereum before block production stopped. Third-party analyses and internal security reviews were part of the response as the network remained halted.
The Cronos network was halted after a large exploit on the Tectonic DeFi lending protocol, pausing block production and freezing every position across the chain. That immediate halt, alongside coordinated assessments by Cronos and security teams across the industry, underscored the exploit’s significance for Cronos DeFi ecosystem security and implemented measures to freeze all activity while analyses continued.


