The Cronos network has been forced to pause its blockchain after an exploit on the decentralized lending protocol Tectonic potentially put $75 million worth of cryptocurrencies at stake.

Cronos announced the halt on Sunday, August 30, 2026, after detecting the exploit on Tectonic. Tectonic separately advised users to stop using its platform until further notice. Neither project has clarified the cause of the incident or the exact amount involved.

We identified an exploit in Tectonic. The Cronos Network has been halted and we'll provide updates here — Cronos Network (@CronosNetwork) August 30, 2026

The ability to halt the chain outright reflects a level of centralized validator control that distinguishes Cronos, an EVM-compatible network closely associated with Crypto.com, from fully permissionless blockchains like Ethereum, which cannot be paused unilaterally.

Cronos Network Investigates Tectonic Exploit

Blockchain expert Weilin Li noted that the hacker was able to take advantage of the fact that Tectonic's collateral factor for the TONIC governance token is 20%, while the token's liquidity is limited.

It seems @TectonicFi has been exploited for around $66M! The root cause is simple: TONIC, it's own governance token has a 20% collateral factor, with very thin liquidity. The attacker performed a Mango-market style pump-and-borrow price manipulation attack. TONIC's price surged… pic.twitter.com/cZ2QQNC9C6 — Weilin (William) Li (@hklst4r) August 30, 2026

According to the researcher, the attacker drove up the price of TONIC tokens by more than 100 times in just 20 minutes, then borrowed other crypto assets against the inflated token price. Weilin Li compared the method to the Mango Markets attack, a 2022 exploit on the Solana-based derivatives platform in which an attacker inflated the price of the MNGO governance token and borrowed roughly $114 million in collateral against it. Accepting thinly traded governance tokens as loan collateral with meaningful collateral factors has repeatedly exposed DeFi lending markets to this class of price-manipulation attack.

Li's initial estimate of the sum involved was $66 million. He further revealed that the hacker managed to transfer $6 million to the Ethereum network before the Cronos network halt. Li also identified an additional hacker wallet holding $8 million, bringing his total estimate of funds involved in the attack to approximately $75 million.

Crypto.com Says Its Services Remain Safe

Kris Marszalek, CEO of Crypto.com, stated that the hack had nothing to do with his company's app or exchange. Both were operating normally and user funds were safe.

There has been a security breach on a Cronos lending protocol Tectonic. Cronos team is investigating, with assistance from security team. app and exchange were not affected and are operating as usual. All funds are safe. I will… — Kris (@kris) August 30, 2026

The cyber-attack appears to have targeted Tectonic rather than the centralized services offered by Crypto.com. The investigation remains ongoing.

Cronos Network Restart Timeline Remains Unclear

Neither Cronos Network nor Tectonic has made an official statement on whether they will block the hacker's wallet addresses, recover lost assets, or compensate victims. There has also been no confirmation of when Cronos Network operations will return to normal. How the $6 million already bridged to Ethereum is handled, and whether any on-chain governance or validator intervention is used to freeze remaining funds, will be closely watched by users and other DeFi protocols navigating similar trade-offs between decentralization and recoverability.

Until further information is provided, Tectonic has advised users not to interact with the protocol. The total sum lost and how the funds will be recovered remain unknown.