Tectonic (TONIC collateral) hack — August 2026

Cronos, the Crypto.com-linked network, halted its entire blockchain on 30 August 2026 after an attacker drained Tectonic, its largest lending protocol. Cronos said only that it had identified an exploit and stopped the chain; Tectonic told users not to interact with the protocol until it confirmed conditions were safe.

No contract was broken. TONIC, Tectonic's own token, carried a 20% collateral factor and traded thinly enough that the attacker could raise its price roughly a hundredfold inside twenty minutes, deposit it as collateral at that price, and borrow real assets against it. The withdrawals covered roughly $54.32m in USDC, $44.87m in USDT, 95.36 WBTC, 1,861 WETH and 39.61m CRO, alongside smaller tokens. About $6m reached Ethereum as roughly 2,592 ETH before the chain halt closed the exit; the rest was stranded on a network that had stopped producing blocks.

The recorded figure is the roughly $75m of attacker-controlled assets estimated by on-chain researcher Weilin Li, who first put the total near $66m and raised it after identifying a second attacker address holding about $8m. Foresight News measured a different quantity and arrived at $119.5m, counting total outflows from the lending pools rather than what the attacker ended up holding; that number is not the one recorded here. Tectonic's total value locked fell from about $121.7m before the attack to roughly $1.73m across the affected markets.

Neither Tectonic nor Cronos had confirmed a loss figure or given a restart timetable. Crypto.com's chief executive said funds on the Crypto.com app and exchange were unaffected and operating normally.