Hacks & Exploits
Cronos Blockchain Suspends Operations Following $75 Million Tectonic Exploit
The Cronos blockchain was brought to a standstill on August 30, 2023, following a major exploit that targeted Tectonic, the largest lending protocol on the network. An attacker manipulated the price of Tectonic's TONIC governance token, inflating it by approximately 100 times in a short period, and subsequently borrowed against this inflated collateral to drain an estimated $66 million to $75 million from the protocol.
Validators on the Cronos network acted quickly to halt block production, effectively freezing the chain and stranding about $60 million of the stolen value within the network. Only around $6 million was successfully bridged to Ethereum before the shutdown occurred. The exploit has drawn comparisons to the notorious Mango Markets incident in 2022, where similar price manipulation tactics were employed.
Crypto.com, which developed the Cronos blockchain, confirmed that its app and exchange remained unaffected by the incident, assuring users that their funds were safe. However, the situation has raised concerns for Tectonic depositors, as they face uncertainty regarding potential reimbursements.
Researcher Weilin Li noted that the exploit involved manipulating the price of TONIC, which was accepted as legitimate by Tectonic's oracle, allowing the attacker to drain lending pools of more stable assets. The incident underscores the vulnerabilities inherent in decentralized finance (DeFi) protocols, particularly those with thin liquidity.
As the situation unfolds, the Cronos team is conducting a thorough investigation, and a postmortem will be released to provide further insights into the exploit and its implications for the network.
FAQ
What happened to the Cronos blockchain on August 30, 2023?
The Cronos blockchain suspended operations due to a major exploit that targeted Tectonic, the largest lending protocol on the network, resulting in the theft of approximately $66 million to $75 million.
How did the exploit on Tectonic occur?
An attacker manipulated the price of Tectonic's TONIC governance token, inflating it by about 100 times, and then borrowed against this inflated collateral to drain funds from the protocol.
What actions were taken by the Cronos network in response to the exploit?
Validators on the Cronos network halted block production, effectively freezing the chain and preventing further transactions, which stranded around $60 million of the stolen value within the network.
Are users of Crypto.com affected by the incident?
No, Crypto.com confirmed that its app and exchange remained unaffected by the incident, assuring users that their funds are safe.
What are the implications for Tectonic depositors following the exploit?
Tectonic depositors face uncertainty regarding potential reimbursements, as the exploit has raised concerns about the vulnerabilities in decentralized finance (DeFi) protocols, especially those with thin liquidity.