Cronos Halts Blockchain After Attempt To Drain $75M From Tectonic Protocol

Cronos suspended its blockchain after an attacker drained Tectonic, the network's largest lending protocol, with losses estimated at $75 million.

30/08/2026 16:5611 min read

Cronos suspended its entire blockchain on Sunday after an attacker drained Tectonic, the network's largest lending protocol. Crypto.com said its own app and exchange were unaffected.

Most of the funds never left the chain before validators stopped production, likely explaining why the CRO token price was unaffected and climbed nearly 5%.

How Cronos, Tectonic, and Crypto.com Fit Together

These are distinct entities. Crypto.com created Cronos, an Ethereum-compatible chain, and issues the CRO token that secures it.

Tectonic is not Crypto.com's code. It launched in December 2021 from the Cronos Labs incubator and operates independently.

That makes Crypto.com's reassurance accurate but limited. The exchange was never exposed. Tectonic depositors are a different matter.

Tectonic still represented nearly the entire lending market on Cronos. It held approximately $121.6 million, or 46% of all DeFi value on the chain, according to DefiLlama data. The next largest lender holds about $30,000.

What the Companies Confirmed

Cronos Network said it discovered the exploit and halted block production. Tectonic warned depositors to stay away.

Crypto.com CEO Kris Marszalek said the app and exchange operated normally, with a postmortem to come.

There has been a security breach on a Cronos lending protocol Tectonic. Cronos team is investigating, with assistance from https://t.co/JNeHyErmqH security team. https://t.co/JNeHyErmqH app and exchange were not affected and are operating as usual. All funds are safe.

I will…

— Kris (@kris) August 30, 2026

Nobody has stated whether Tectonic depositors will be reimbursed.

Why This Tectonic Exploit Could End Differently

Researcher Weilin Li estimated the drain at roughly $75 million. Only about $6 million reached Ethereum before the freeze, Li said. Some $60 million sits stranded on Cronos. That represents about 91% of the stolen amount, going nowhere.

Update, another attacker controlled address with ~8M on Cronos: https://t.co/CjZgR36ZwD.

Making total loss at around 75M.

— Weilin (William) Li (@hklst4r) August 30, 2026

Those numbers should be treated as provisional, as nothing is confirmed until the postmortem is published.

Compare with the $8.7 million Moonwell exploit three days earlier. Base kept producing blocks. The funds left.

Cronos could stop because of how it is constructed. It runs on Tendermint with a limit of 100 validators, making a coordinated halt feasible.

We identified an exploit in Tectonic.

The Cronos Network has been halted and we'll provide updates here

— Cronos Network (@CronosNetwork) August 30, 2026

There is also a precedent. A bridge exploit minted $570 million on BNB Chain in October 2022. Within five hours, 26 validators paused the network and recovered close to $470 million.

The tradeoff is the one raised by the Linea chain halt debate. A chain that can be switched off is also one that can claw money back. The same property, judged twice.

Validators now choose. Roll back, blacklist the attacker, or restart untouched. That determines whether the tentative $60 million returns home.

Share to

Disclaimer: this article comes from third-party media and is provided for reference only. It does not constitute investment advice. Crypto and other financial products carry significant price volatility risk, so please make your own decisions carefully.

Related articles