{ "version": 1, "event_id": "evt_7cec54c7d44b7cd5", "url": "https://xiyu.news/events/evt_7cec54c7d44b7cd5/", "json": "https://xiyu.news/api/events/evt_7cec54c7d44b7cd5.json", "type": "security_incident", "status": "closed", "category": "crypto", "title": { "zh": "Tectonic 遭攻击并触发 Cronos 回滚", "en": "Tectonic exploit triggers Cronos rollback" }, "current_state": { "zh": "事件后报告已发布，确认了具体逃逸金额，链已恢复运行，监控继续。", "en": "Post-mortem published confirming escaped amount, chain resumed, monitoring continues." }, "first_seen_at": "2026-09-01T08:00:00+08:00", "last_updated_at": "2026-09-08T22:53:15.005515+00:00", "last_material_change_at": "2026-09-08T08:58:42.219120+00:00", "confidence": 0.95, "updates_count": 2, "sources_count": 6, "entities": [ "after", "cronos", "exploit", "forces", "halt", "rollback", "tectonic", "theft" ], "identifiers": [], "topics": [ "chain-rollback", "cronos", "cryptocom", "tectonic" ], "updates": [ { "update_id": "upd_afa9933fe387d33c", "event_id": "evt_7cec54c7d44b7cd5", "occurred_at": "2026-09-01T08:00:00+08:00", "published_at": "2026-09-01T08:00:00+08:00", "first_seen_at": "2026-09-01T08:00:00+08:00", "time_precision": "edition", "update_type": "initial", "material_change": true, "title_zh": "Tectonic 遭窃约 7,500 万美元，Cronos 验证者暂停并回滚链。", "title_en": "Tectonic lost about $75M and Cronos validators halted and rolled back the chain.", "what_changed_zh": "Tectonic 遭窃约 7,500 万美元，Cronos 验证者暂停并回滚链。", "what_changed_en": "Tectonic lost about $75M and Cronos validators halted and rolled back the chain.", "current_state_zh": "链已通过回滚遏制攻击影响，事件继续观察。", "current_state_en": "The rollback contained the incident; monitoring continues.", "detailed_summary_zh": "Cronos链上的Tectonic借贷协议遭攻击，迫使Crypto.com支持的Cronos区块链暂停出块并回滚至攻击前状态。安全公司PeckShield初步估计被盗资金约7400万美元，其中629万美元已跨链至以太坊，无法通过回滚追回。\n\n这是Cronos DeFi生态中最严重的事件之一，凸显了预言机操控攻击如何能掏空借贷协议，并引发波及全链的回滚、抹除用户交易。这损害了市场对Crypto.com区块链基础设施的信任，也引发了对去中心化与紧急治理之间取舍的质疑。\n\nTectonic的预言机页面仅列出VVS Finance和Crypto.com作为TONIC的价格来源，研究员Weilin Li将此攻击描述为类似Mango Markets的价格操控手法。验证者丢弃了近11000个区块，抹除约两小时的交易；Cronos只有33个仅限受邀验证者，其DeFi总锁仓量（TVL）自2022年以来已下降92%。", "detailed_summary_en": "An exploit in the Tectonic lending protocol on Cronos forced the Crypto.com-backed blockchain to halt block production and rewind history to the pre-exploit state. Security firm PeckShield initially estimated the compromised funds at approximately $74 million, though $6.29 million had already been bridged to Ethereum.\n\nThis is one of the most severe incidents in the Cronos DeFi ecosystem, underscoring how an oracle-manipulation exploit can drain lending protocols and trigger a chain-wide rollback that erases user transactions. It damages trust in Crypto.com's blockchain infrastructure and raises questions about the tradeoff between decentralization and emergency governance.\n\nTectonic's oracle page lists only VVS Finance and Crypto.com as price sources for TONIC, and researcher Weilin Li described the attack as a Mango Markets-style price manipulation scheme. Validators discarded nearly 11,000 blocks, erasing about two hours of transactions; Cronos also has 33 invitation-only validators and its DeFi TVL has fallen 92% since 2022.", "background_zh": "Tectonic是构建在Cronos上的去中心化借贷协议，Cronos是Crypto.com创建的兼容EVM的区块链。Crypto.com通过法币购买、Visa卡奖励和质押产品大力推广TONIC代币，成为该协议最大的散户入口之一。区块链回滚依靠验证者协调删除攻击后的区块，虽然能追回被盗资产，但也会抹除该窗口期内合法用户的交易记录。", "background_en": "Tectonic is a decentralized lending protocol built on Cronos, the EVM-compatible blockchain created by Crypto.com. Crypto.com heavily promoted TONIC, the protocol's token, through fiat purchases, Visa card rewards, and staking products, making it one of the largest retail onramps for the protocol. A blockchain rollback uses validator coordination to erase post-exploit blocks, which can recover stolen assets but also removes legitimate user transactions recorded during that window.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "此次攻击及随后的暂停与回滚可能会拖累CRO及其他Cronos生态资产的市场情绪，用户担忧安全性与不可篡改性。该事件也可能加速Cronos DeFi的资金外流——其TVL自2022年以来已下降92%，并凸显单链生态中的集中度风险。", "market_impact_en": "The exploit and subsequent halt/rollback are likely to weigh on sentiment for CRO and other Cronos-based assets, as users worry about safety and immutability. The incident may also accelerate capital outflow from Cronos DeFi, whose TVL had already dropped 92% since 2022, and it highlights concentration risks in single-chain ecosystems.", "importance_score": 9.0, "references": [ { "url": "https://decrypt.co/376913/crypto-coms-cronos-halts-entire-blockchain-after-75m-tectonic-exploit", "title": "Crypto.com's Cronos Halts Entire Blockchain After $75M ..." }, { "url": "https://cryptodaily.co.uk/2026/08/cronos-resumes-tectonic-exploit-rollback", "title": "Cronos Resumes After Tectonic Exploit Rollback" }, { "url": "https://defillama.com/protocol/tectonic", "title": "Tectonic TVL, Fees & Revenue" }, { "url": "https://coinmarketcap.com/currencies/cronos/", "title": "Cronos price today, CRO to USD live price, marketcap and chart | CoinMarketCap" }, { "url": "https://tectonic.gitbook.io/docs", "title": "What is Tectonic? | Tectonic - GitBook" }, { "url": "https://thebitcoinmanual.com/articles/chain-rollback/", "title": "What Is A Chain Rollback? - The Bitcoin Manual" } ], "confidence": 1.0, "story_ids": [ "rss:protos.com_feed_:3a75cc3f717c0c85", "rss:cryptoslate.com_feed_:8a5e8b5fdb9b8bde" ], "sources": [ { "url": "https://protos.com/crypto-com-promoted-tectonic-forces-cronos-to-halt-rewind/", "label": "Protos", "source_type": "rss", "official": false }, { "url": "https://cryptoslate.com/cronos-restart-after-tectonic-exploit-chain-rollback/", "label": "CryptoSlate", "source_type": "rss", "official": false } ] }, { "update_id": "upd_80d7146af144fbb2", "event_id": "evt_7cec54c7d44b7cd5", "occurred_at": "2026-09-08T08:10:44Z", "published_at": "2026-09-08T08:10:44Z", "first_seen_at": "2026-09-08T08:58:42.219120Z", "time_precision": "published", "update_type": "aftermath", "material_change": true, "title_zh": "Cronos 回滚抹去两小时交易，逆转 Tectonic 1.11 亿美元攻击", "title_en": "Cronos confirms $9.2M slipped away before Tectonic exploit rollback", "what_changed_zh": "Cronos 官方事后报告确认受影响的借贷活动约 1.204 亿美元，其中约 1.112 亿美元通过回滚恢复，但 919 万美元在验证者暂停网络前已转出。", "what_changed_en": "Cronos official post-mortem confirms affected borrowing activity about $120.4M, with ~$111.2M reversed via rollback, but $9.19M exited before validators halted the network.", "current_state_zh": "事件后报告已发布，确认了具体逃逸金额，链已恢复运行，监控继续。", "current_state_en": "Post-mortem published confirming escaped amount, chain resumed, monitoring continues.", "detailed_summary_zh": "Cronos confirms $9.2M escaped before validators halted the network during the Tectonic exploit, with $111.2M reversed via rollback.", "detailed_summary_en": "Cronos confirms $9.2M escaped before validators halted the network during the Tectonic exploit, with $111.2M reversed via rollback.", "background_zh": "Cronos 是由 Crypto.com 支持的兼容以太坊的区块链网络，Tectonic 是构建在其上的借贷协议，用户可通过存入抵押品借入加密资产。在此事件中，黑客在流动性薄弱的市场上操纵 TONIC 价格，并以虚高的价值大量借款。区块链回滚会将账本恢复到较早状态，丢弃该时间点之后的所有区块和交易；另一种选择——在不恢复状态的情况下重启——会让借出的资产继续留在攻击者手中。", "background_en": "Cronos is an Ethereum-compatible blockchain network backed by Crypto.com, and Tectonic is a lending protocol built on it where users can borrow crypto by depositing collateral. In this incident, the hacker manipulated TONIC's price on thin markets and borrowed large sums against the inflated value. A blockchain rollback restores the ledger to an earlier state, discarding all blocks and transactions after that point; the alternative—restarting without restoring state—would have left the borrowed assets in the attacker's control.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "这次回滚开创了治理先例，可能使用户和开发者重新评估对 Cronos 的信任假设，并因最终性被推翻而影响 Cronos DeFi 市场及相关代币的流动性和活动。不过，约 92% 的受影响资金仍保留在链上，市场影响将取决于生态系统的后续反应；本文不构成投资建议。", "market_impact_en": "The rollback sets a governance precedent that could make users and developers reassess trust assumptions on Cronos, potentially affecting liquidity and activity in Cronos DeFi markets and related tokens, since finality was overridden. That said, roughly 92% of affected funds were retained on-chain, and any market effects depend on how the ecosystem responds; this is not investment advice.", "importance_score": 8.5, "references": [ { "url": "https://cryptonews.net/news/security/33412727/", "title": "Cronos executes controversial blockchain rollback to recover ..." } ], "confidence": 0.95, "story_ids": [ "rss:cointelegraph.com_rss:b8a5701740ed59ba", "rss:www.theblock.co_rss.xml:e22ed4ddaf60cf0c", "rss:www.coindesk.com_arc_outboundfeeds_rss_:e7b337386cde89f0", "rss:decrypt.co_feed:fef103daafdd50fd" ], "sources": [ { "url": "https://cointelegraph.com/news/cronos-tectonic-rollback-111m-9m-escaped?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false }, { "url": "https://www.theblock.co/news/ecosystems/2026-09-08-cronos-post-mortem-413724", "label": "The Block", "source_type": "rss", "official": false }, { "url": "https://www.coindesk.com/business/2026/09/08/cronos-executes-controversial-blockchain-rollback-to-recover-crypto-worth-usd111-million", "label": "CoinDesk", "source_type": "rss", "official": false }, { "url": "https://decrypt.co/377686/cronos-erased-two-hours-transactions-defi-exploit", "label": "Decrypt", "source_type": "rss", "official": false } ] } ] }