Tectonic Loss Shows Collateral Prices Can Be Hacked

The Tectonic crypto platform lost at least $6 million after someone pumped the price of its Tonic token more than 100-fold in about 20 minutes and used the inflated collateral to borrow assets. Cronos later halted activity and says it back online after freezing roughly $68 million that had not yet left the chain. The attack did not need to break the lending code. It abused the protocol’s trust in a token price that could move faster than the market could correct, so the borrower could make bad collateral look good long enough to pull value out. TRM Labs said Cronos rolled back state to reverse the frozen amount, but that did not affect the funds already gone. For DeFi lenders and exchange risk teams, the exposure sits in the asset you accept, not just the contract you deploy. If thinly traded tokens can be posted as collateral, price manipulation can become the fraud path even when the protocol itself is working as designed.

Part of the PlainSec briefing for 2026-09-01

Every edition of this story: Tectonic Loss Shows Collateral Prices Can Be Hacked

Sources