Cronos halted block production on Sunday after an attacker drained Tectonic, the largest lending protocol on the network, in what appears to be one of the chain’s most disruptive security incidents to date.

Researcher Weilin Li estimated the value taken at about $75 million. According to Li, only a small portion reached Ethereum before the shutdown, while most of the funds remained stuck on Cronos after validators stopped the chain.

Attack prompts full network pause

The incident began with a breach at Tectonic, a major decentralized lending platform on Cronos. After the protocol was drained, the network stopped entirely, an unusual step that immediately prevented further normal activity on chain.

Tectonic depositors were warned to stay away while the situation was assessed. A postmortem is expected, but at the time of the report it was still unclear whether users affected by the exploit would be repaid.

How much moved and where it went

Li estimated the total drain at roughly $75 million. Of that amount, about $6 million was said to have reached Ethereum before the freeze took effect.

Around $60 million, by Li’s estimate, remained stranded on Cronos once validators halted the blockchain. That means the majority of the suspected stolen funds did not leave the network before block production stopped.

Crypto.com says core products were unaffected

Crypto.com said its own app and exchange were not touched by the exploit and continued to operate normally despite the disruption on Cronos.

The containment of most of the funds on Cronos may also help explain the muted market reaction. According to the source report, CRO was not hit by the incident and was instead up nearly 5%.

Validator choices now matter

Cronos runs on Tendermint and has a validator set capped at 100, a structure that allows validators to coordinate a chain-wide pause. That design now puts the next move in the hands of the validator set.

The main options described in the report were to roll the chain back, blacklist the attacker, or restart without intervention. That decision is likely to determine whether the funds still trapped on Cronos can be recovered and what happens next for Tectonic users.

Source: beincrypto.com