An official post-mortem report from Cronos has finally clarified the exact figures behind the Tectonic exploit. Out of a total of $120.4 million in borrowed funds manipulated by the hacker, developers rolled back $111.2 million through a network rollback. The remaining $9.19 million, or 7.6% of the impacted total, was withdrawn before validators halted blockchain operations.
The attack method began with a $5 million deposit. The attacker borrowed and immediately redeposited TONIC tokens in a loop repeated for up to 98 cycles. Concurrently, they bought up the token across thin trading liquidity. This two-pronged attack caused TONIC’s price to jump nearly 300-fold, prompting Tectonic’s price oracle to adjust and register the fictitious valuation.
Single Transaction Drains Nine Markets
Using the manipulated price, a single transaction emptied nine of Tectonic’s lending markets simultaneously. The attacker extracted maximum value through 11 separate transfers, moving assets that included stablecoins, Bitcoin, Ether, and several other digital assets.
Tectonic’s monitoring system detected the price anomaly at 12:49 UTC on August 30. However, the shutdown procedure did not take place immediately. The validator set only agreed to halt network operations at 14:32:47 UTC. The 103-minute delay provided a window for the hacker to transfer $9.19 million in stolen funds across Cronos network boundaries.
Definitive Figures After Recovery
Block production was halted for an extended period and only resumed at 23:49:01 UTC, after developers restored all user balances to a safe state. The publication of these official figures concludes earlier coverage of the Liquid Network and Cronos hacks, providing a detailed breakdown without conflicting loss estimates.
Rolling back the blockchain ledger prevented the loss of the majority of borrowed funds. The $9.19 million that escaped highlights the reality of network security mechanisms: transaction records can be rolled back via internal consensus, but assets already moved outside the blockchain cannot be forcefully clawed back.
Reported by Cointelegraph.
Previously: Polymarket Eyes $21 Billion Valuation - As Cronos Forced to Roll Back Network After $75 Million Exploit
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
