Cronos Erased Two Hours of Transactions to Reverse $111 Million DeFi Exploit

Cronos said it reversed roughly $111.2 million of activity tied to an August 30 exploit of the Tectonic lending protocol by rolling back the chain and discarding nearly two hours of transaction history. Developers and validators halted block production, erased 10,961 blocks — equivalent to 1 hour 54 minutes of settled transactions — and then restarted the network after applying patches and coordinating restarts.

According to the post-mortem, the attacker manipulated TONIC’s price in low-liquidity decentralized exchange markets and used the inflated token as collateral to borrow about $120.4 million across nine markets. Validators intervened to protect funds still on the chain, restoring state to recover an estimated 92% of affected assets, but that process also undid every legitimate transaction that occurred during the rollback window.

Validators stopped the network at 9:32 a.m. EST and resumed block production at 6:49 p.m. EST on August 30, after roughly nine hours offline. Cronos said about $9.19 million left the network before validators halted it and remains unrecovered; that sum was beyond the rollback’s reach. Earlier, some preliminary estimates had put the affected value at $75 million and the amount bridged out at $6 million, figures the post-mortem notes for context.

Cronos acknowledged shortcomings in communication during the outage and said reversed transactions can be reviewed using archived records rather than public blockchain explorers. The report also referenced other recent blockchain responses to attacks — including Maya Protocol and Ravencoin incidents — and noted security experts’ warnings that AI could speed vulnerability discovery, while adding that the Tectonic post-mortem found no evidence of AI involvement in this exploit.