24 min ago2 min readCronos halts blockchain after $75 million lending exploit hits lending app Tectonic. (Boitumelo/Unsplash)SummaryCronos halted its blockchain Sunday after an attacker manipulated the price of Tectonic’s thinly traded TONIC token and borrowed real assets against inflated collateral, in an exploit estimated at about $75 million.Tectonic’s total value locked plunged from about $121.7 million on Aug. 26 to roughly $3 million by Monday, according to DefiLlama.Cronos and Tectonic had not provided a timetable for restarting the network or confirmed the losses as of Monday morning.Cronos stopped its entire blockchain on Sunday after an attacker exploited Tectonic, its biggest lending platform, in an attack estimated at roughly $75 million.Cronos is a blockchain launched by Crypto.com in 2021 and closely tied to the exchange, which uses it to run cheaper transactions for its own products. Its CRO token is the one Crypto.com holds up as the centre of its ecosystem, and the chain hosts a small set of lending and trading apps, of which Tectonic is the largest.Tectonic lets users deposit crypto and borrow other assets against it, much like putting up a house as collateral for a loan. One of the assets it accepted as collateral was TONIC, its own token, which had about $1.34 million of liquidity and roughly $11,000 of daily trading volume. Tectonic's own documentation warns that low-liquidity assets can be particularly susceptible to price manipulation.That appears to have provided the opening, blockchain data shows, as an attacker pushed TONIC's price up roughly 100-fold in about 20 minutes, deposited the suddenly much more valuable tokens into Tectonic and borrowed real assets against them. TONIC had a 20% collateral factor, meaning every $100 of value recognized by the protocol could support roughly $20 of borrowing.The damage showing up in public data is already severe. Tectonic had about $121.7 million of assets locked in the protocol on Aug. 26, according to DefiLlama, close to half of all capital deposited across Cronos DeFi. That figure had fallen to roughly $3 million by Monday.Cronos runs on software that caps the network at 100 validators — or entities that supply computing power to support and maintain a network — few enough to coordinate a shutdown within minutes. BNB Chain did the same thing in October 2022, when 26 validators paused the network after a bridge exploit and recovered close to $470 million of the $570 million taken. The cost is that everyone else's funds stop moving too, and a chain that can be switched off is one whose neutrality has limits.The attack follows a similar exploit at lending platform Moonwell last week, where an attacker manipulated the price of a thinly traded token used as collateral. Base, where Moonwell runs, kept producing blocks and the money left. Also last week, a roughly 3% move in a thin Pendle market triggered about $36 million of liquidations on Morpho.Tectonic's last public posts before Sunday were in June and May, when it was warning users to withdraw one asset and reducing how much could be borrowed against others.Cronos and Tectonic had not published a restart timetable or a confirmed accounting of the losses as of Monday morning.12345678910Anvil: The Missing Collateral LayerAnvil: The Missing Collateral LayerAnvil is a shared on-chain collateral layer built on a programmable letter of credit: reserve assets as a guarantee -no loan, no interest, keep custody & yield.Jul 29, 2026Anvil is a shared on-chain collateral layer built on a programmable letter of credit: reserve assets as a guarantee -no loan, no interest, keep custody & yield.Why it matters:Anvil is a shared on-chain collateral layer built on a programmable letter of credit: reserve assets as a guarantee -no loan, no interest, keep custody & yield.View Full Report