Tectonic crypto theft triggers Cronos rollback: US$111.2 million reversed, US$9.19 million unrecovered
An attacker borrowed US$120.4 million against manipulated Tectonic collateral. Cronos halted and rolled back transactions, reversing US$111.2 million. Affected users should check balances and follow Tectonic's official reopening instructions.
If you used Tectonic or moved funds on Cronos on 30 August, check your balances and transaction history with the service you used and ask it to reconcile missing transfers. Follow Tectonic's official reopening instructions before making new deposits or borrowing.
What’s happening
An attacker exploited collateral valuation on Tectonic, a crypto lending service on Cronos, on 30 August. Manipulated TONIC values allowed approximately US$120.4 million to be borrowed across nine markets. Cronos validators halted the entire blockchain, then restored its pre-attack state and restarted it that evening. According to Cronos's post-mortem as reported by the press, this reversed US$111.2 million, but US$9.19 million had already left the network and remained unrecovered. The rollback also erased unrelated users' transactions across nearly two hours of blockchain history. Tectonic subsequently described plans to reopen withdrawals and loan repayments first, while keeping deposits and borrowing paused. The Block's report, updated on 19 October, still listed the outstanding loss and reconciliation work. No later recovery, completed Tectonic fix or full reopening was verified through 3 November; direct access to the official X statements was blocked.
- What
- Breach
- Affects
- Tectonic crypto lending service and Cronos blockchain
- Fixed in
- Nothing to patch
- Since
- 30 Aug 2026
- Closed
- 19 Oct 2026
Timeline
- Update
The Block's updated report continued to list US$9.19 million as unrecovered. It reported ongoing reconciliation with exchanges, bridges and other affected platforms, without identifying the attacker or explaining how the remaining loss would be covered.
- Made public
Reports of Cronos's post-mortem put the reversed value at US$111.2 million and the unrecovered amount transferred off-network at US$9.19 million. The rollback discarded 10,961 blocks, covering 1 hour and 54 minutes of transactions.
- Update
Cointelegraph's updated report described Tectonic's planned phased reopening: withdrawals and loan repayments first, with deposits and borrowing remaining paused during further checks.
- Update
Cronos resumed block production after validators restored the blockchain to its pre-attack state. The rollback also reversed transactions unrelated to the theft.
- Update
Cronos validators halted the blockchain after Tectonic detected the suspicious activity at 12:49 UTC. The halt interrupted transactions across Cronos.
- UpdateNothing to patch
An attacker manipulated TONIC collateral values and borrowed approximately US$120.4 million across nine Tectonic lending markets.
Sources
- Cronos executes controversial blockchain rollback to recover crypto worth $111 millionCoinDesk · 8 Sept 2026
- Cronos confirms $9.2M slipped away before Tectonic exploit rollbackCointelegraph · 8 Sept 2026
- Cronos rollback erases $111M of $120M Tectonic exploit transfersCointelegraph · 7 Sept 2026
- Cronos says $9.2 million remains unrecovered after Tectonic exploit, chain rollbackThe Block · 19 Oct 2026