Cronos has restarted block production after validators restored the blockchain to its state prior to an exploit affecting Tectonic, a decentralized lending protocol. The restart replaced a network halt with monitored recovery, with block production resuming from block 90,896,189 on August 31.
The network said it was fully back online, though some protocols, RPC providers, explorers, and bridges may require additional time to recover. Cronos indicated it would monitor chain stability and publish a full postmortem analysis at a later date.
The Exploit and Asset Recovery
Onchain researcher Weilin Li attributed the exploit to manipulation of TONIC, Tectonic's governance token. According to Li's analysis, the attacker inflated TONIC's price and used the token as collateral to borrow other assets from the protocol.
Li initially estimated approximately $66 million in affected assets, later revising the figure to roughly $75 million after identifying an additional attacker-controlled address. He estimated that only about $6 million was bridged to Ethereum before Cronos halted the network, leaving the majority of compromised assets on-chain. These figures represent Li's assessment rather than official accounting.
Recovery and Remaining Questions
The restart involved restoring chain state to before the Tectonic exploit, with node operators able to restart on version 1.7.8 using updated mainnet snapshots. Cronos did not specify how the rollback would affect all transactions submitted during the discarded period.
Tectonic separately acknowledged the incident and advised users not to interact with the protocol until confirming it was safe to do so. Crypto.com, which operates on Cronos, said its app and exchange remained unaffected and operating normally.
Cronos and Tectonic have not yet published a confirmed loss figure, official root-cause analysis, or complete accounting of how attacker-controlled assets will be handled. Recovery timelines for connected services and the findings of the promised postmortem will determine the final impact and when Tectonic users can resume normal activity.
