breaking · security · defi · lending · network-governance
Cronos Says $9.19 Million Remains Unrecovered After Exploit
The official post-mortem puts affected borrowing at $120.4 million: roughly $111.2 million was reversed by the rollback, while 7.6% had already left Cronos.
Cronos says $9.19 million remains unrecovered after the August 30 Tectonic exploit, replacing the earlier external estimates with an official post-mortem accounting.
According to Cronos, the attacker manipulated the price of Tectonic's thinly traded TONIC token and used the inflated collateral to borrow $120.4 million across nine markets. Validators halted the network and later rolled it back to the last block before the attack.
The rollback reversed approximately $111.2 million in affected value. The remaining $9.19 million—7.6% of the total—had already moved off the network and was beyond the restoration's reach, Cronos said.
That intervention also discarded one hour and 54 minutes of chain history, covering 10,961 blocks. Transactions in that interval were reversed whether or not they were related to the exploit. Block production resumed roughly eleven hours after the attack began.
The updated numbers sharpen two separate risks. Thin collateral and pricing controls allowed borrowing far beyond the market depth supporting TONIC. The emergency rollback contained most of the accounting impact but required validators to override recent finality for all users in the affected window.
Cronos said exchanges, bridges and other platforms were still reconciling their systems and that no user action was required at the time of the post-mortem. The report did not identify the attacker or define how the unrecovered amount will be treated.
Sources and disclosures
Primary claim source: Cronos post-mortem, as quoted and summarized by The Block and Cointelegraph on September 8, 2026. Dollar values are Cronos' accounting and should not be conflated with earlier researcher estimates.
Update note
Revision r2 candidate, observed September 8, 2026 BRT. Recheck Cronos and Tectonic for recovery, user-remediation or reconciliation updates before publication.