Fraudsters Steal $6M from Tectonic Crypto Platform via Token Price Manipulation

At least $6 million was drained from decentralized lending platform Tectonic over the weekend after an attacker exploited the protocol's thinly traded Tonic token by artificially inflating its price more than 100-fold within roughly 20 minutes. The fraudsters then used the artificially valued Tonic tokens as collateral to borrow assets against the inflated price, attempting to siphon an estimated $74 million from the platform, according to blockchain security firms tracking the incident. The platform confirmed on Sunday morning that it was responding to an active security incident, and the public blockchain Cronos, operated by Crypto.com, was halted to stem the outflow of stolen funds. Users concerned about their broader digital exposure can run a privacy checkup to review their accounts following major market exploits.

Cronos CEO Ryan Wyatt stated the emergency shutdown was necessary to prevent further losses, explaining that the chain was taken offline "to protect users from being exposed to this exploit on the Tectonic protocol." Kris Marszalek, CEO of Crypto.com, confirmed his firm was assisting in the investigation and clarified that Crypto.com's own platform was unaffected. While more than $6 million successfully exited the platform, approximately $68 million remained on the Cronos blockchain. According to blockchain security firm TRM Labs, Cronos executed a rollback that restored the chain to its pre-attack state, effectively reversing the nearly $69 million in pending transactions. TRM Labs noted the rollback was visible on-chain and had no impact on the $6 million already withdrawn. Neither Crypto.com nor Cronos responded to requests for comment on the disposition of the frozen funds or whether negotiations with the attacker would be pursued. Tectonic announced plans to reopen in phases, initially enabling withdrawals while keeping borrowing and depositing paused, with a full postmortem to follow.

As of Monday, the identity of the attacker remained unknown. Security analysts have drawn comparisons to the October 2022 exploit of Mango Markets, in which Avraham Eisenberg manipulated the MNGO token price to borrow against inflated collateral and ultimately pocketed the difference; Eisenberg was later convicted of commodities fraud, commodities market manipulation, and wire fraud. The Tectonic incident comes just days after a similar exploit on the Moonwell platform resulted in losses of approximately $8.7 million. Ari Redbord, global head of policy at TRM Labs, reported that market manipulation attacks now account for roughly one in eight crypto hacks, up from one in 17 in 2022, with 32 incidents recorded so far this year. Investors and traders are advised to review credentials tied to affected platforms and verify account integrity using a password checker following such events.