Tools Crypto Exploit Tracker exploit-0006
Exploit record
Tectonic Oracle Manipulation and Cronos Halt
- Loss
- $120M
- Attack vector
- Oracle Manipulation
- Chain
- Cronos
- Sector
- Lending
What happened
Cronos's post-mortem puts Tectonic's 30 August collateral-manipulation incident at approximately $120.4m in affected borrowing. A validator-coordinated rollback reversed about $111.2m; Cronos says $9.19m had left the chain before the halt and remained unrecovered. The headline figure records gross affected borrowing, before the restoration.
The post-mortem, checked on 8 September, says validators halted at block 90,907,150 and restored state to block 90,896,188, with production resuming from 90,896,189 at 23:49:01 UTC on 30 August. Reconciliation with bridges and exchanges continued. YFarmX's earlier independent Borrow-event reconstruction valued the gross movement at $124,472,178, using its own asset quantities and prices; that estimate remains documented in the investigation. This tracker now uses Cronos's $120.4m official estimate for consistency with its $111.2m reversal and $9.19m unrecovered figures. The earlier $6.8m traced off-chain was a partial flow estimate, superseded here by the operator's broader reconciliation.
Sources
- Cronos Network incident post-mortemx.com/CronosNetwork/status/2097131718948094299
- YFarmX earlier on-chain reconstructionyfarmx.com/cronos-halt-tectonic-drain-on-chain-trace/
- Cronos Network, announcing the haltx.com/CronosNetwork/status/2094072333434769703
- Tectonic incident noticex.com/TectonicFi/status/2094072821630799989
- Kris Marszalek, Crypto.comx.com/kris/status/2094081766109982764
- CertiK Alert on the addresses holding the proceedsx.com/CertiKAlert/status/2094203181173817656
- Tectonic money market parameterstectonic.gitbook.io/docs/protocol/money-market-parameters
- Tectonic price oracle documentationtectonic.gitbook.io/docs/developer/price-oracle
On YFarmX
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026
