Cronos rolled back nearly two hours of transactions to recover from a $111.2 million hack, affecting both exploited and legitimate transactions.
Cronos Takes Action Against DeFi Hack
Cronos, the blockchain network affiliated with Crypto.com, implemented an extraordinary rollback of nearly two hours of transaction history to mitigate losses from a $111.2 million exploit related to the Tectonic lending protocol. This measure, executed on August 30, aimed to protect approximately 92% of the network's remaining funds following a significant security breach.
Validators on the network decided to reverse completed transactions, a move that deviates from the permanence typically associated with blockchain technology. In a statement, the development team acknowledged the difficulty of this decision, which involved striking a balance between user expectations for transaction finality and the need to safeguard the network's assets. "This was a difficult choice made in collaboration with the validators, balancing the finality that users anticipate from a blockchain against the funds that were at risk," they noted.
The rollback affected 1 hour and 54 minutes of transactions, meaning that all legitimate activities during that period were also undone. Despite this effort, around $9.19 million had already been withdrawn from the network before it was halted, rendering that amount unrecoverable.
The Tectonic protocol was exploited when an attacker inflated the price of the TONIC token on decentralized exchanges, subsequently borrowing about $120.4 million across nine markets based on this manipulated collateral. Cronos validators halted the network at 9:32 a.m. EST and rolled back 10,961 blocks to restore the system to a secure state.
Following the rollback, block production resumed at 6:49 p.m. EST after nearly nine hours offline. The team faced challenges in maintaining transaction records while coordinating the restart with updated software. They acknowledged that communication during the incident could have been better, stating that reversed transactions can now only be verified through archived records rather than public blockchain explorers.
Cronos expressed its commitment to addressing the disruption caused by the incident and emphasized the importance of reconciling with affected platforms and enhancing security measures moving forward.
Broader Context of Crypto Security
This incident is part of a larger trend, as other blockchain networks have also faced significant hacking challenges. For instance, the Maya Protocol was forced to halt operations after an attack exploited multiple vulnerabilities, leading to losses of around $1.65 million. Similarly, Ravencoin had to reconstruct its blockchain due to vulnerabilities that threatened previous transactions.
As the crypto landscape continues to evolve, security experts warn that advancements in AI could facilitate faster identification of vulnerabilities by attackers, although there is no indication that AI played a role in the Tectonic exploit.
