Tectonic (2026) — Crypto Hack
Partially RecoveredAttacker inflated the price of Tectonic's thinly traded TONIC governance token roughly 100x in 20 minutes and used it as collateral to borrow ~$74M in real assets from the largest lending protocol on Cronos.
Summary
Attacker inflated the price of Tectonic's thinly traded TONIC governance token roughly 100x in 20 minutes and used it as collateral to borrow ~$74M in real assets from the largest lending protocol on Cronos.
How It Was Compromised — DeFi via Oracle Price Manipulation
On August 30, 2026, an attacker pumped TONIC's price ~100x in about 20 minutes (TONIC had only ~$305K weekly trading volume and ~$1.34M liquidity) and posted the inflated position as collateral to borrow ~$74M from Tectonic, Cronos' largest lending protocol (TVL ~$121.7M before the attack). Cronos validators halted the entire chain within minutes as an emergency consensus action. Roughly $6M reached Ethereum via USDC before the halt; ~$60M remained stranded on Cronos. The chain was restarted on August 30 at 23:49 UTC from block 90,896,189 with state rolled back to before the exploit, reversing ~$68.7M of the attack. PeckShield estimated ~$74M drained; TRM Labs put the widely reported loss at ~$75M (one on-chain analysis: ~$119.5M). Tectonic's TVL fell from ~$121.7M to ~$3M.
Fund Flow & Laundering Analysis
~$6M in USDC was bridged to Ethereum before the chain halt; the remaining ~$68.7M was stranded on Cronos and reversed by the validator rollback to the pre-attack state.