Cronos Rolls Back Blockchain to Recover $111 Million in Stolen Funds

iconChaincatcher
Share
AI summary iconSummary
Cronos executed a blockchain rollback to recover $111.2 million in stolen funds following a $120.4 million exploit on Tectonic. Attackers manipulated TONIC token liquidity to trigger a loan. Validators paused the network, reversed 10,961 blocks, and resumed operations 11 hours later. This blockchain upgrade-style action canceled all transactions within the affected time window. Cronos stated this was the only way to reclaim the assets. Harmony employed a similar approach, while Flow abandoned its plan in 2023. The 100-validator limit enabled rapid coordination but underscores dependence on consensus.

ChainCatcher reports that, in a post-incident report, Cronos confirmed the August 30 attack on the lending platform Tectonic involved $120.4 million in borrowed funds. Validators made the "difficult decision" to roll back the chain's history, successfully recovering approximately $111.2 million (about 92% of the affected funds), while around $9.19 million had already been withdrawn before the network was paused and could not be recovered. The attacker exploited weak DEX liquidity within minutes, inflating the price of Tectonic’s TONIC token by roughly 100 times and borrowing $120.4 million in a single transaction across nine markets. Validators paused the network approximately two hours later, restoring the chain to the last block prior to the suspicious activity; block production resumed about 11 hours after the attack. The rollback reversed 1 hour and 54 minutes of on-chain history, encompassing 10,961 blocks, and all transactions within this window were revoked, regardless of whether they were related to the attack. Cronos stated that the alternative—restarting the network without restoring prior state—would have left the stolen assets in the attacker’s hands. This rollback follows Harmony’s announcement of a similar plan, while Flow abandoned its rollback proposal last December due to community opposition. With a validator cap of 100, Cronos enabled rapid coordination for pausing and restarting, but also highlights that the network’s finality in emergencies depends on validator consensus.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.