New PR on Cronos turns off evidence slashing. Dev comment: “Temporary recovery build after a coordinated rollback - deploy on all validators, then revert.”
They’re prepping a chain rollback after the ~$120M Tectonic exploit.
https://t.co/N8LezoxY5x
New PR on Cronos turns off evidence slashing. Dev comment: “Temporary recovery build after a coordinated rollback - deploy on all validators, then revert.”
They’re prepping a chain rollback after the ~$120M Tectonic exploit.
https://t.co/N8LezoxY5x
Someone emptied Tectonic's vault this morning.
About $120 million borrowed against collateral genuinely worth a few hundred thousand. It took eleven minutes. Two hours later, Cronos stopped producing blocks.
Here's what happened, in plain English.
Tectonic is a pawnbroker. You leave something valuable with it some Bitcoin, say and it lends you stablecoins against it. Don't repay, and it keeps your deposit. The cash it lends out is other people's savings, parked there to earn interest.
TONIC is Tectonic's own token, and it's nearly worthless per coin. Before today, 3.9 million TONIC was worth about 5p. Tectonic accepts it as collateral anyway. And to work out what your deposit is worth, Tectonic checks the price on VVS at that moment. It trusts the price tag on the market stall.
So picture a stall selling pebbles for a penny each. The pawnbroker next door lends money against pebbles, and glances at the stall to value them.
A thief walks up and buys nearly every pebble on the stall in one go. With hardly any left, the price tag jumps from a penny to forty pence. He then wheels a barrow of pebbles into the pawnbroker. The pawnbroker looks over at the stall, sees "forty pence each," values the barrow at millions, and hands over everything in the vault.
The thief leaves and never comes back for the pebbles. The price drifts back to a penny. The pawnbroker is left holding a pile of gravel and an empty safe.
That is exactly what happened. tectonic:native was the pebbles, and the TONIC/USDC pool moved about 40×.
How the morning went, UK time:
13:38:56 - The setup. The attacker deploys a contract and, in the same transaction, buys roughly 16 trillion TONIC out of three pools using about $200k of USDC and $400k of CRO. The pool price jumps ~40×. The same contract deposits that TONIC into Tectonic and adds 5 million USDC of real money, so the position looks like an ordinary large customer.
13:41 -13:45 - Two dry runs. Buy more TONIC, deposit it, borrow 2 million and then 1.3 million USDC. Both clear. Nothing stops it.
13:49:39 - The drain. One transaction borrows everything Tectonic has: the USDC, the USDT, the Bitcoin, the Ether, the CRO. It goes to two collection wallets.
13:50–15:15 - The scramble. Copycat bots spot the still-inflated price and scrape the last ~$2 million. Depositors race to withdraw whatever's left. Arbitrageurs drag TONIC back down. CRO and stablecoin prices swing around as roughly $60 million gets pushed through the pools.
15:32:47 — Lights out. Cronos produces its last block. Every public node stops at the same height, which isn't a crash — that's validators halting the chain deliberately. The official RPC had already gone dark before that.
So how much was actually stolen? Around $120 million walked out. The attacker put in roughly $5.6 million of his own to make it work - the USDC camouflage plus the CRO and USDC spent moving the price - and that's gone too. Call it about $115 million net, plus the ~$2 million the copycats took.
Two things worth taking from this.
First: nothing here was "hacked." No key was stolen, no lock was picked. Tectonic did exactly what it was built to do - it read a price off a thin pool and believed it. If your protocol reads spot price directly from a market someone can move, that price is for sale.
Anyone with enough capital to shift the pool can tell your contract whatever they like. Spot price is not an oracle, and it hasn't been for years.
Second: a chain that can be switched off by its validators is a different animal from one that can't.
That's a design choice rather than a flaw, and in a moment like this it's arguably the right call. But it's worth knowing which kind of ground you're standing on before you need to find out.
How much was stolen?
Thrilled to announce our first institutional funding round with a $400 million strategic investment from Citadel Securities valuing https://t.co/dwRH3Ycaul at $20 billion. An incredible milestone 10 years in on our journey and the beginning of a new phase of growth. Grateful to our team who got us here, our customers and community who supported us in both bull and bear and finally to our new partners for their trust. Together we will capture new opportunities at this critical juncture for the industry and win. Onwards!
📢 Travala is the Official Travel Partner of @CoinfestAsia 2026!🌴 The World’s Largest Crypto Festival
🗓️ Aug 20-21
📍Melasti Beach, Bali, Indonesia
Get $50 OFF when you book your flights, hotels & activities✈️
Sign up or log in via this link👉 https://t.co/wB3O9qMXvT
Considering booking my next rental car with crypto on @travalacom .
Perks for @AVAFoundation Smart members include instant discounts and up to 3% back in AVA Givebacks!
Anyone tried it out yet? How was the experience?
$AVA #CryptoTravel#Web3
Get crypto rewards for travelling on @travalacom ✈️
The AVA Smart Program is the leading web3 travel loyalty program 🌟
Perks include:
🌍 Crypto Rewards
🛍️ Discounts
🎁 $AVA Bonuses
+ much more
Stop collecting points & take ownership of your rewards 🔓
Join for FREE today 👇
The era of manual booking is over!
Introducing the Travala Travel MCP: the first agentic AI travel protocol
🔹 Travellers: Book 2.2M+ hotels in one chat
🔹 Devs: Earn 10% $cbBTC rebates
🔹 Tech: Gasless $USDC txns on @base via x402
Try it now 👉 https://t.co/V6y0wMG3Qc
@AurumTrustCro Ideally from the token, but liquidity seems too low. So either contributors wallet or seed funding.
I understand why you don't want seed funding, but you could argue that people already invested in your idea (token).
Also: 👍 for keeping AUT and not rug OG holder w/ new token.
Just received my Smart member giveback of $117.29 in BTC within 24h of checking out of the hotel I booked with @travalacom. Really smooth experience and one of my favorite Smart member benefits when booking travel.
$AVA @AVAFoundation@travalacom
Royal National Park, a hidden gem just half an hour south of Sydney.
This stretch of coastline is all dramatic cliffs, crashing waves, and unreal ocean views. My tip: go early for cooler weather, fewer people, and the best light for photos.
@travalacom
📢 RENT CARS WITH CRYPTO 🚗💨
You can now book car rentals from 1,700+ top-tier suppliers like @Avis, @Europcar, @Sixt, @Enterprise, and @Hertz
📍 50,000+ locations worldwide
BOOK NOW: https://t.co/GAOBV0ce8q
For more details, check out our blog: https://t.co/hr1i7rQsrr
📢 Introducing the New Travala Logo
Since 2017, Travala has been connecting the worlds of travel and Web3.
Today, we proudly unveil our new logo and brand identity. A future-focused design built for travellers without borders.
Learn more in our blog: https://t.co/aWLNZrSvnw
You can get 50$ in BTC by booking an accommodation (for at least 400$) on travala.
Just sign up using my referral link: https://t.co/qOdLgDARHs for details see the below post.
🔥 2026 Ultimate New Year Travel Sale 🔥
Enjoy TWO promotions, with DOUBLE giveback and referral rewards!
✅ @AVAFoundation Smart Program members can get up to 20% back in BTC
✅ You & the friend you invite will receive US$50 EACH in BTC
Book now: https://t.co/CL8FxBfPc0
🔥 2026 Ultimate New Year Travel Sale 🔥
Enjoy TWO promotions, with DOUBLE giveback and referral rewards!
✅ @AVAFoundation Smart Program members can get up to 20% back in BTC
✅ You & the friend you invite will receive US$50 EACH in BTC
Book now: https://t.co/CL8FxBfPc0
DOUBLE REWARDS 🎁 LIMITED TIME ONLY
Get up to 20% BACK in $BTC on travel with a Smart Diamond membership 💎
Plus, get quarterly Travel Credit rewards, $AVA bonuses, airport lounge access, entry into luxury giveaways & much more, valued at $2,000+ annually.
How it works 👇
1⃣ Activate your Diamond membership with 2,500 $AVA + a Travel Tiger NFT
2⃣ Book any flight, hotel or activity on @travalacom by 15 Feb 2026
3⃣ Get 20% back in $BTC, $AVA or Travel Credits on all hotels & activities + 6% back on all flights
Activate now ⬇️
https://t.co/OaKzjHQVT5
It's giveaway time! 🔥
We're kicking off a new round of quests with a $1,700 USDT prize pool!
Quests are live now until Nov 12 across 4 different platforms!
Your chance to WIN👇 (A thread)