Ontology's mainnet will stay offline for at least 24 more hours after its security review confirmed "malicious attack activity," even as Cronos and Injective resume block production.
Ontology's mainnet will stay offline for at least 24 more hours after its security review confirmed "malicious attack activity," even as Cronos and Injective resume block production.

Ontology's mainnet will stay down at least 24 hours after its review confirmed malicious attack activity, with ONT at $0.0531 on Sept. 1.
"The mainnet will not resume until remediation, testing and a third-party security review confirm the upgrade has closed the vulnerability," Ontology said in a Sept. 1 statement, shifting from the precautionary pause it announced a day earlier.
The pause began Aug. 31 when a daily check flagged a "potential security concern," prompting validators to halt block production. Ontology said the confirmed malicious activity does not involve user assets — ONT, ONG and other on-chain holdings remain unaffected. The network upgrade spans six steps: security remediation, component upgrades, internal checks, testing, integrity verification and an external security assessment. ONT climbed toward $0.0550 before sliding below $0.0520 after the pause announcement, with volume at $7.62 million, down 38.7 percent, and market cap near $53.09 million.
The extended outage places Ontology at the center of a multi-chain security event. Cronos and Injective, which halted block production around the same time, have already resumed — Cronos after containing a $74 million price-inflation attack on Tectonic's TONIC token to $6 million in Ethereum, per PeckShield. The divergence leaves ONT holders watching a resumption window that hinges on the validator-coordinated upgrade passing third-party checks.
Cronos' "validator-consensus emergency action" contained the Tectonic exploit, with Crypto.com CEO Kris Marszalek saying the incident never reached the exchange or its app. Tectonic's total value locked collapsed from about $122 million to under $3 million on Aug. 31 before recovering above $121 million. Injective's halt was shorter and murkier — on-chain analyst Rarma found the chain stalled for 3 hours 42 minutes on Aug. 31, with the last block, 181,027,006, timestamped 16:10:02 UTC and the next arriving at 19:52:14. The height climbed by exactly one across the gap, meaning nothing was reversed, undercutting speculation of a $2.79 million drain that neither Injective nor Upbit has confirmed. INJ traded near $4.83 on Sept. 1.
A paused mainnet blocks new transactions, transfers and dApp activity until service resumes, leaving holders and developers with temporary limits on any on-chain action tied to Ontology. The project flagged rising AI-driven security threats across the industry, urging users to verify wallet addresses and transaction details before interacting with the network. The containment process, paired with a validator-coordinated upgrade, is a standard incident-response pattern for blockchains facing an active threat — halting block production limits an attacker's options even as it stops legitimate activity.
The parallel recoveries at Cronos and Injective, set against Ontology's extended outage, show how a single security wave can hit multiple chains at once — and how quickly markets price the divergence. ONT's modest move relative to the event's scale suggests traders are treating the containment as credible, but the resumption date, contingent on third-party verification, remains the next signal to watch.
This article is for informational purposes only and does not constitute investment advice.