Tectonic Exploit: Cronos Reports $9.2M Escaped During Network Rollback
Following a post-incident analysis, Cronos revealed that the Tectonic security breach involved $120.4 million in compromised borrowing, with validators managing to prevent all but 7.6% from leaving the network.
The layer-1 blockchain platform Cronos has disclosed that $9.19 million successfully exited its network prior to validators implementing a network halt during the recent Tectonic security incident, offering definitive figures regarding assets that remained beyond the reach of the subsequent rollback operation.
According to Tuesday's post-incident analysis, Cronos revealed that artificially inflated collateral valuations resulted in approximately $120.4 million worth of borrowing transactions. The network restoration to its state before the exploit successfully reversed roughly $111.2 million, which means 7.6% of the compromised assets had already moved beyond the network's boundaries.
This official statement verifies the magnitude of the security breach following initial assessments that estimated the impacted amount at approximately $75 million. The revelation also establishes the volume of funds transferred away from Cronos at $9.19 million, surpassing the $8.3 million that blockchain analytics firm Bitquery had previously tracked to the Ethereum network.
As Cointelegraph reported in earlier coverage, a single transaction drained nine separate Tectonic lending pools via 11 distinct transfers that included stablecoins, Bitcoin, Ether and various other digital assets.
According to Bitquery's analysis, the exploiter initially deposited $5 million, subsequently engaging in a pattern of borrowing and redepositing TONIC tokens across a 98-cycle sequence while simultaneously acquiring the token that had limited trading volume. This strategic activity propelled TONIC's market price upward by almost 300 times as Tectonic's oracle price feed tracked the movement.
According to Cronos's timeline, Tectonic identified the suspicious activity at 12:49 UTC on Aug. 30, with validators implementing a network halt at 14:32:47 UTC. The network's block production recommenced at 23:49:01 UTC following the successful restoration of account balances.