Tectonic (TONIC collateral) hack — August 2026

Cronos, the Crypto.com-linked network, halted its entire blockchain on 30 August 2026 after an attacker drained Tectonic, its largest lending protocol.

No contract was broken. TONIC, Tectonic's own token, carried a 20% collateral factor and traded thinly enough that the attacker could raise its price roughly a hundredfold inside twenty minutes, deposit it as collateral at that price, and borrow real assets against it. The withdrawals covered roughly $54.32m in USDC, $44.87m in USDT, 95.36 WBTC, 1,861 WETH and 39.61m CRO, alongside smaller tokens. Tectonic's total value locked fell from about $121.7m before the attack to roughly $1.73m across the affected markets.

What happened next is the part worth recording. Cronos did not negotiate and did not wait: its validators restored the chain state to a point before the attack, discarding 10,961 blocks and about one hour and fifty-four minutes of history, and resumed production from block 90,896,189 at 23:49:01 UTC on 30 August after roughly twenty-two hours down. Cronos called it a validator-consensus emergency action to protect users. The theft was erased from the ledger along with every other transaction anyone had made in that window, which is the cost of the remedy and the reason it remains contested: the balances of users who had nothing to do with the attack were rewound too.

The rollback could not reach Ethereum. $6.29m had already crossed as 2,592.2152 ETH before the halt and stayed gone; the attacker later began bridging portions of it onward to Bitcoin. That $6.29m is the loss that survived, against about $68.7m reversed, which is recorded as recovered rather than netted off the headline.

The $75m is an on-chain researcher's estimate of attacker-controlled assets. Foresight News and CertiK measured a different quantity and arrived at $119.5m and $120.4m respectively, counting total outflows from the lending pools rather than what the attacker ended up holding; those are not the figure recorded here. Neither Tectonic nor Cronos has confirmed a final amount.