Key Takeaways:
- Cronos halted its blockchain after a reported $75 million Tectonic exploit
- About $60 million, or 91 percent of the haul, remains stranded on-chain
- Validators now decide whether to roll back, blacklist, or restart untouched
Back
Cronos halts blockchain after $75 million Tectonic hack attempt
Cronos halted its entire blockchain on Sunday after an attacker drained Tectonic, the network's largest lending protocol, in a reported $75 million exploit. Crypto.com said its own app and exchange were never touched.
Researcher Weilin Li put the drain at roughly $75 million, with only about $6 million reaching Ethereum before validators froze block production. "Update, another attacker controlled address with ~8M on Cronos," Li said on X. "Making total loss at around 75M."
Most of the haul never left the chain. Some $60 million, about 91 percent of the total, sits stranded on Cronos, Li said. Tectonic held roughly $121.6 million, or 46 percent of all DeFi value on the chain, DefiLlama data shows; the next-biggest lender holds about $30,000. CRO, the token securing Cronos, rose nearly 5 percent as the freeze spared the network's native asset.
Validators now face a choice that decides whether the stranded funds come home: roll back the chain, blacklist the attacker, or restart untouched. Cronos runs on Tendermint with a cap of 100 validators, making a coordinated pause realistic. The precedent is BNB Chain, where 26 validators paused the network after a $570 million bridge exploit in October 2022 and recovered close to $470 million.
Cronos Network said it found the exploit and halted block production. Tectonic warned depositors to stay away. Crypto.com CEO Kris Marszalek said the app and exchange ran normally, with a postmortem to follow. Nobody has said whether Tectonic depositors will be repaid.
The three names are distinct. Crypto.com built Cronos, an Ethereum-style chain, and issues the CRO token securing it. Tectonic is not Crypto.com's code; it launched in December 2021 out of the Cronos Labs incubator and runs independently. That makes the Crypto.com reassurance true but narrow — the exchange was never exposed, while Tectonic depositors are another matter.
The exploit contrasts with the $8.7 million Moonwell hack on Base three days earlier. Base kept producing blocks and the money walked. Cronos could stop because of how it is built, and the trade-off is the one raised by the Linea chain halt debate: a chain somebody can switch off is also a chain that can claw money back.
Treat the numbers as provisional until the postmortem lands. The decision on rollback, blacklist, or restart determines whether the tentative $60 million comes home.
This article is for informational purposes only and does not constitute investment advice.
