Cronos Network, an L1 blockchain, has resumed normal block production. The blockchain network had temporarily halted operations in response to a major exploit targeting the Tectonic lending protocol. Cronos said validators carried out an emergency consensus intervention to protect user funds. Simultaneously, the consensus rolled back the blockchain state to a point before the attack. However, as per the latest update by Cronos Network, the blockchain has now restarted after many hours.
According to the network’s official update, block production resumed from block 90,896,189. Cronos has instructed node operators to restart their infrastructure using Cronos v1.7.8 and the latest mainnet snapshots. However, despite the restart, the network remains under monitoring as validators assess its stability. Cronos also informed that some dApps, RPC providers, and bridges may require additional time to restore services.
The Cronos Network is producing blocks again and is fully back online.
The Cronos Network halted earlier today. This was a validator-consensus emergency action to protect users from an exploit on the Tectonic protocol. The chain state was restored to before the Tectonic exploit…
— Cronos Network (@CronosNetwork) August 31, 2026
Cronos Rollback Reverses Most Tectonic Exploit Loss
The rollback effectively reversed most of the funds that the attacker had extracted but had not yet moved from the Cronos network. However, the intervention also removed legitimate transactions that occurred after the selected rollback point.
Reports indicate that the rollback discarded approximately two hours of subsequent blockchain activity. This amounts to nearly 11,000 blocks in some estimates. Funds that had already been bridged from Cronos to other networks have not been recovered by the rollback.
Tectonic Exploit Drained Up to $75 Million
Earlier today, TectonicFi faced an exploit. Tectonic, which is one of the largest lending protocols on Cronos, suffered a price manipulation and over-borrowing attack. The attack resulted in estimated losses of approximately $74 to $75 million. The attacker reportedly targeted $TONIC, Tectonic’s native token, which had relatively thin liquidity. By manipulating its price within a short period, the attacker was able to artificially increase the value of TONIC. Then he used $TONIC as collateral on the lending platform.
The attacker then used the inflated collateral to obtain additional borrowing capacity. The manipulation reportedly generated tens of millions of dollars in borrow power. The attacker subsequently withdrew valuable assets, including USDT, USDC, and other tokens, from Tectonic.
Only approximately $6 million to $6.3 million of the extracted assets were reportedly bridged to Ethereum before Cronos validators halted block production. Those funds were subsequently converted into roughly 2,500 to 2,600 ETH. This is far less than the initial estimates of $75 million Cronos halted block production after detecting the Tectonic exploit as an emergency security measure. Crypto.com, which is closely associated with the Cronos ecosystem, said the exchange was not affected by the incident.
With Cronos now producing blocks again, validators and ecosystem participants will continue monitoring the network. The upcoming postmortem is expected to clarify the exploit’s full mechanics and the precise amount stolen.