Cronos Validators Halt the Chain After a $75 Million Collateral Manipulation at Tectonic

Cronos, the network associated with Crypto.com, stopped producing blocks late on Saturday after an attacker drained an estimated $75 million from Tectonic, the largest independent lending application on the chain. CoinDesk reported that the attacker pushed Tectonic's thinly traded governance token, TONIC, up roughly 100-fold, pledged the inflated position as collateral, and then borrowed the pools' liquid assets against it.

The mechanism is old and well documented. Nothing in the lending contract broke. The price feed reported a real market price for a token whose market was too shallow to defend, and the loan-to-value logic did exactly what it was written to do. Security researchers at DeFiHackLabs published a proof of concept within hours, labelling it a Mango Markets-style collateral price manipulation, a reference to the 2022 attack on the Solana-based exchange that used the same pattern.

Validators then agreed to halt the chain. That decision confined most of the proceeds: roughly $6 million had been bridged to Ethereum before the stop, leaving the remainder immobilized on a network that is not processing transactions. Crypto.com chief executive Kris Marszalek confirmed the breach and said his security teams were assisting the investigation. crypto.news reported that most identified assets remain on the network.

The halt is the uncomfortable part of this story. A validator set small enough and coordinated enough to stop a public chain within minutes is a strong incident-response tool, and at the same time it shows that Cronos settlement depends on a group that can be convened by phone. Users who lost nothing because of the pause are also users whose finality was revocable.