Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
Currencies38953
Market Cap$ 2.71T-1.29%
24h Spot Volume$ 34.54B+47.8%
DominanceBTC57.69%+0.08%ETH10.87%-0.04%
ETH Gas0.20 Gwei
BlockchainDeFiHackCRO
Aug 31, 2026
2min read
byOgwu Emmanuel
forBlockchainReporter
Crypto.com’s Cronos blockchain was paused by validators after an attacker manipulated the thinly traded TONIC token—which had about $1.34 million liquidity and $11,000 daily volume—pushing its price roughly 100-fold in about 20 minutes to borrow against it and leaving an estimated $75 million unaccounted for from the Tectonic lending app. Tectonic’s locked assets fell from $121.7 million on August 26 to roughly $3 million by Monday, there is no restart timetable or confirmed loss accounting, and the incident highlights systemic DeFi risks from low-liquidity collateral, token manipulation and lending security gaps.
See what traders are focused on
Cronos, the blockchain launched by Crypto.com, was paused by its validators after an attacker allegedly manipulated the thinly traded TONIC token to borrow real assets from the Tectonic lending app, according to CoinDesk. The incident is the latest in a string of collateral-price exploits and has left an estimated $75 million in losses unaccounted for while the network stays halted. It marks one of the more consequential shutdowns for the chain, which Crypto.com holds up as the center of its ecosystem.
How the Attack Unfolded
Tectonic accepted TONIC, its own token, as collateral even though the asset held only about $1.34 million in liquidity and roughly $11,000 in daily trading volume. Blockchain data shows an attacker pushed the price up roughly 100-fold in about 20 minutes, deposited the suddenly more valuable tokens and borrowed other assets against them. With a 20% collateral factor, every $100 of recognized value could support about $20 of borrowing. Tectonic’s own documentation warns that low-liquidity assets can be particularly susceptible to price manipulation, and its last public posts before Sunday dated back to June and May, when it was warning users to withdraw one asset and trimming how much could be borrowed against others.
Validators Pause the Network
Cronos runs on software capped at 100 validators, few enough to coordinate a shutdown within minutes. Tectonic held about $121.7 million in locked assets on August 26, close to half of all capital in Cronos DeFi, but that figure had fallen to roughly $3 million by Monday. The move mirrors BNB Chain’s October 2022 halt, when 26 validators stopped the network after a bridge exploit and recovered close to $470 million of the roughly $570 million taken. The trade-off is that everyone else’s funds stop moving too.
What Remains Unresolved
Cronos and Tectonic had not published a restart timetable or a confirmed accounting of losses as of Monday morning. The attack follows a similar exploit at Moonwell on Base last week and about $36 million of liquidations on Morpho after a thin Pendle market moved sharply. It also lands shortly after other Cosmos-based chains were urged to halt after an exploit, showing how low-liquidity collateral can be weaponized across lending markets.
Source: cryptorank.io