Cronos Stops Blockchain to Halt Hackers, What's the Chronology?

It only took about 20 minutes for the price of TONIC to surge 100-fold, and that alone was enough to force the Cronos network to take a step rarely taken by any blockchain: halting its entire operations. 

Cronos halted its blockchain on Sunday, August 30, 2026, after the Tectonic exploit struck the largest lending protocol on the network, putting tens of millions of dollars in user funds at risk. 

The news immediately became a hot topic in the crypto community because it involved two major names at once: Cronos, developed by Crypto.com, and Tectonic, which has long been known as the heart of DeFi in that ecosystem.

Key Takeaways

• Cronos halted its blockchain on August 30, 2026, after Tectonic was hacked via TONIC token price manipulation that surged 100-fold in just about 20 minutes.
• Loss estimates remain unclear: around US$66-75 million according to on-chain researcher Weilin Li, while a separate archive node analysis cited figures up to US$119.5 million.
• The Crypto.com app and exchange are confirmed safe with no disruptions; approximately US$60 million of the stolen funds are actually trapped on Cronos thanks to the swift network shutdown.

Chronology of Cronos Halting Its Blockchain After Tectonic Was Hacked

It all began when Cronos Network announced via a post on X that they had detected an exploit on Tectonic. "We have identified an exploit on Tectonic. The Cronos network has been halted and we will provide updates here," Cronos Network wrote in its post. 

Shortly after, the Tectonic team also confirmed via its official account that they were investigating the incident and asked users to temporarily refrain from interacting with the protocol until its security was confirmed restored.

Before the incident occurred, Tectonic was recorded as managing total value locked (TVL) of about US$121.7 million with loans active at approximately US$82.7 million, according to DefiLlama data cited by The Block. This figure made Tectonic the largest lending protocol on Cronos, commanding nearly half of the total DeFi value on the network.

Crypto.com CEO, Kris Marszalek, quickly asserted via X that the Crypto.com app and exchange were completely unaffected by the incident. "There has been a security breach on the Cronos lending protocol, Tectonic. 

The Cronos team is investigating with the help of our security team. Our app and exchange are unaffected and operating as usual. All funds are safe," he wrote, as quoted by BeInCrypto. 

It is important to understand that Tectonic is not a product directly built by Crypto.com, but rather an independent protocol launched in December 2021 through the Cronos Labs incubator.

Moments like this usually trigger extra vigilance among DeFi users. If you want to trade crypto more calmly through a platform supervised by OJK, you can register an account at Bittime and start trading with a more structured security system.

How Did the Tectonic Exploit Mechanism Occur?

On-chain researcher Weilin Li identified this attack pattern as similar to the Mango Markets case back in 2022 — a collateral asset price manipulation that is already well-known in the DeFi world. 

The attacker pumped the price of TONIC, Tectonic's governance token with notably thin liquidity, causing it to surge approximately 100-fold in just 20 minutes. Once the price was inflated, the token was used as collateral to borrow other, far more liquid assets from Tectonic's pools.

Ironically, Tectonic's own official documentation actually already warned that low-liquidity assets like TONIC are vulnerable to price manipulation. 

Li initially estimated the attacker made off with about US$66 million, before he discovered another address connected to the attacker containing an additional approximately US$8 million, bringing the total estimated loss up to around US$75 million.

Read Also: Nvidia's $500 Billion AI Funding, AI Crypto Tokens Also Benefiting?

However, this figure is not the only estimate circulating. A separate on-chain analysis using a Cronos archive node, cited by CoinPedia and Blockonomi, cited total drained funds reaching approximately US$119.5 million within a 65-minute window. 

There were also withdrawals of US$54.32 million in USDC, US$44.87 million in USDT, 95.36 WBTC, 1,861 WETH, and 39.61 million CRO, plus 752 liquidations worth about US$8.71 million and bad debt of about US$32.6 million. 

As of the writing of this article, neither Tectonic nor Cronos has confirmed which final figure is correct, so both estimates remain provisional.

What is clear is that of the total funds allegedly stolen, only about US$6 million was successfully bridged to the Ethereum network before Cronos halted block production. The rest, around US$60 million or about 91% of Li's estimate, remains trapped within the Cronos network.

Read Also: Cronos: Cronos: Ethereum Virtual Machine (EVM) Compatible Blockchain from Crypto.com

Why Could Cronos Shut Down Its Entire Network?

Cronos's ability to halt its entire blockchain within minutes is no coincidence, but rather a direct consequence of its technical design. Cronos runs on Tendermint consensus with the number of validators capped at a maximum of 100 nodes, making coordination to stop block production far more realistic compared to blockchains with thousands of dispersed validators.

The contrast is stark when compared to the Moonwell case on the Base network three days before this incident. At that time, the attacker successfully stole about US$8.7 million via MAMO token price manipulation, but Base continued producing blocks as usual, allowing the stolen funds to escape entirely. 

There is also a larger precedent from October 2022: the US$570 million bridge exploit on BNB Chain, where 26 validators managed to halt the network in just 5 hours and recovered nearly US$470 million of the total stolen funds.

This ability to "turn off" a network actually reignites the long-standing debate about centralization in the blockchain world, similar to the discussions that emerged when Linea was temporarily halted. 

Read Also: Tokenized Stocks vs Regular Stocks: Definition, Differences, and How to Buy

A blockchain that can be shut down by certain parties does mean stolen funds can be recovered quickly, but on the other hand it also shows that the network is not fully decentralized. 

Now it is up to the Cronos validators to decide: perform a transaction rollback, blacklist the attacker's addresses, or continue operations without any changes. This decision will ultimately determine whether the approximately US$60 million still trapped can be returned to its owners.

As of the writing of this article, neither Cronos nor Tectonic has announced a definite timeline for when the network will resume operations, and there is no certainty regarding a compensation scheme for affected Tectonic depositors.

Read Also: 10 Largest Real World Asset (RWA) Tokenizations in the World

Conclusion

The Cronos blockchain halt case serves as an important reminder of the risks lurking behind DeFi protocols with thinly liquid tokens like TONIC — while also demonstrating how a network's technical design can determine whether stolen funds can be saved or vanish entirely. 

Although loss estimates remain uncertain between US$75 million and US$119.5 million, one thing is certain: the Crypto.com app and exchange are completely unaffected, while the fate of funds trapped on Cronos now hinges on the decision of the network's validators.

Check the price of Bitcoin (BTC), Ethereum (ETH), XRP, Solana (SOL), GRAM, and BNB as well as the leading memecoin DOGE. You can trade directly on Bittime!

Bittime is a licensed and supervised Digital Financial Asset Trader (PAKD) platform by the Financial Services Authority — where you can buy Bitcoin in Indonesia and hundreds of other crypto assets starting from Rp10,000. Registration is fast, secure, and you can get started today.

Monitor the USDT to IDR conversion and the price movements of your favorite crypto assets in real-time. All available in one crypto investment app that you can download for free on the Play Store.

Ready to start? Register now on Bittime and execute your investment strategy on a platform trusted by millions of users in Indonesia.

FAQ

Why did Cronos halt its blockchain? 

Cronos halted its entire network after detecting an exploit on Tectonic, its largest lending protocol, to prevent the stolen funds from fully escaping the chain.

How much was lost in this Tectonic exploit? 

Estimates still vary: approximately US$66-75 million according to on-chain researcher Weilin Li, while a separate archive node analysis cited figures up to US$119.5 million. No official confirmation from Tectonic or Cronos regarding the final figure has been released yet.

Were Crypto.com user funds affected? 

No. Crypto.com CEO Kris Marszalek confirmed that the Crypto.com app and exchange are operating normally and all user funds there are safe.

How did the TONIC price manipulation work in this exploit? 

The attacker pumped the price of TONIC, Tectonic's thinly liquid token, causing it to surge approximately 100-fold in 20 minutes, then used it as collateral to borrow other, more liquid assets.

Can the funds trapped on Cronos be returned to their owners? 

There is no certainty yet. Cronos validators still need to decide whether to perform a transaction rollback, blacklist the attacker's addresses, or continue operations without any changes.