Cronos Rolled Back 10,961 Blocks to Recover $111 Million After Tectonic Collateral Attack

The lending protocol Tectonic, which runs on the Cronos chain, lost $120.4 million after an attacker pushed the price of the TONIC token up roughly 300 times and borrowed against the inflated collateral, according to Rekt News. Cronos validators then rolled back 10,961 blocks, recovering $111.2 million. Roughly $9.19 million had already been moved off the chain and has not been recovered.

Nothing in the lending contract needed to be broken. The market accepted a thin-liquidity governance token as collateral and read its price from a source that a well-funded buyer could move. The oracle reported what it was designed to report, and the loan logic extended credit against that number. Losses of this kind come from components working exactly as specified, which is why audits scoped to contract code keep missing them.

The response is the harder question. A validator set that can reorganize nearly eleven thousand blocks to reverse an unwanted outcome has demonstrated that settlement on that chain is discretionary. Depositors gained $111.2 million. Anyone who transacted during the reversed window, and anyone who treated Cronos settlement as final, lost the assumption they were relying on. Both statements are true at once, and chains that intervene rarely publish the decision rule they used.

The pattern extends beyond Cronos. Rekt News also documented the Liquid Network incident, in which an actor exploited a range-proof cache-key collision in Elements to mint roughly 4,000 unbacked L-BTC, draining about $320 million from the Bitcoin sidechain. That actor returned 3,400 BTC and kept roughly 598.5 BTC. In both cases, the recovered share depended on human negotiation or privileged intervention rather than on protocol design.