Cronos Network has halted operations after a $75 million breach at Tectonic, its main lending protocol, while Crypto.com's services remain unaffected.
Summary
- Cronos Network has suspended all blockchain activities following a significant security breach at Tectonic, its primary lending protocol.
- The breach is estimated to have caused a loss of approximately $75 million, with around $6 million withdrawn before the network was paused.
- While the blockchain remains inactive, Crypto.com's app and exchange continue to operate normally.
The Cronos blockchain was completely halted on Sunday due to an attack on Tectonic, a decentralized finance (DeFi) lending platform that plays a crucial role in the network by holding nearly half of all capital deposited across DeFi applications.
Tectonic allows users to deposit cryptocurrencies for others to borrow, earning interest in the process. It launched first on Cronos and, until the breach, managed around $121.7 million in deposits and $82.7 million in active loans. In contrast, its nearest competitor, Mimas Finance, had only about $30,000 in holdings, according to DefiLlama data.
We identified an exploit in Tectonic. The Cronos Network has been halted and we'll provide updates here.
— Cronos Network (@CronosNetwork) August 30, 2026
Cronos confirmed via a tweet that it detected an exploit in Tectonic, prompting the network's suspension. The following day, it reiterated that investigations were ongoing with the help of security experts in the industry.
Onchain analyst Weilin Li described the incident as reminiscent of a previous exploit at Mango Markets, detailing how the price of Tectonic's governance token, TONIC, surged dramatically before the attacker withdrew funds. Li explained that the token's governance structure allowed for significant borrowing against its limited liquidity, which was around $1.34 million at the time of the attack. Initial estimates of the theft were around $66 million but were later adjusted to $75 million after identifying additional funds controlled by the attacker.
#PeckShieldAlert reported that Tectonic was exploited for approximately $74 million. In response, Cronos paused the entire chain.
The attacker managed to bridge out about $6 million to #Ethereum before the pause, leaving around $60 million on Cronos.
— PeckShieldAlert (@PeckShieldAlert) August 31, 2026
As of Monday, Tectonic's deposits plummeted to around $3 million, a staggering 97.5% decrease within a month. Other analyses suggest that total capital outflows could be even higher, around $119.5 million, indicating a broader impact beyond the attacker's withdrawals.
Reasons for the Network Shutdown
The network's suspension effectively contained the breach, with only $6 million transferred to Ethereum before operations ceased. Much of the remaining funds were deposited into a decentralized exchange pool, likely to prevent being blacklisted. Data from DefiLlama indicates that the largest decentralized exchange on Cronos saw nearly $61 million in deposits in the same timeframe, despite a 22% drop in overall DeFi holdings on the chain.
The decision to halt operations was facilitated by Cronos's limited validator set of 100, allowing for swift coordination. However, this also suspended all other activities, including loans and trades, impacting users not directly involved with Tectonic.
Crypto.com CEO Kris Marszalek assured that the app and exchange were functioning normally and that customer funds remained secure. He promised a thorough investigation into the incident, while Tectonic advised users to refrain from using the protocol until it was deemed safe again.
There has been a security breach on Tectonic. The Cronos team is investigating with assistance from security experts. All funds are safe.
— Kris (@kris) August 30, 2026
This incident marks the third occurrence of a similar attack in recent weeks, following breaches at Moonwell and Pendle's reUSD market. Notably, Tectonic has faced prior security challenges, including two earlier incidents classified as protocol logic failures.
Currently, neither Cronos nor Tectonic has provided a timeline for resuming operations or indicated whether affected depositors will receive compensation for their losses.
