Fraudsters Steal $6 Million from Tectonic Crypto Platform via Token Price Manipulation
An attacker exploited the Tectonic crypto lending platform by artificially inflating the price of its native token, leading to the theft of at least $6 million.
At least $6 million was stolen from the decentralized crypto lending platform Tectonic after an attacker manipulated the price of its native Tonic coin over the weekend. The platform confirmed the security incident on Sunday morning, prompting the public blockchain Cronos to halt activity in an effort to prevent the outflow of stolen funds.
The exploit involved the fraudsters rapidly inflating the price of Tectonic's thinly traded Tonic token to over 100 times its original value within a mere 20 minutes. Using these artificially inflated tokens as collateral, the attacker was then able to borrow assets against them. Blockchain security firms initially estimated the attempted theft to be around $74 million, though approximately $68 million was successfully frozen on the Cronos blockchain and prevented from leaving the platform.
Kris Marszalek, CEO of Crypto.com, the company behind the Cronos blockchain, stated that they are assisting in the investigation and confirmed that Crypto.com's own platform was not affected. Ryan Wyatt, CEO of Cronos, explained that the emergency shutdown was necessary to protect users from the exploit targeting the Tectonic protocol, and that the platform has since been restored.
Blockchain security firm TRM Labs reported that Cronos restored its system to its state prior to the attack, effectively reversing the nearly $69 million that remained on the platform. This rollback, visible on the blockchain, did not impact the $6 million that had already been transferred out. It remains unclear whether Tectonic plans to negotiate with the hacker for the recovery of these funds.
Tectonic has announced plans to reopen in phases, initially allowing withdrawals while keeping borrowing and deposit functionalities paused. The company has committed to releasing a full postmortem analysis of the incident at a later date. As of Monday, the identity of the attacker remains unknown.
Security experts have drawn parallels between this incident and the 2022 Mango Markets exploit, where a fraudster similarly borrowed funds, artificially inflated a token's price, and then cashed out. The individual responsible for the Mango Markets attack was later arrested and convicted of multiple fraud charges.
This attack on Tectonic follows closely on the heels of a similar incident affecting the Moonwell platform, which resulted in losses of approximately $8.7 million in cryptocurrency. Ari Redbord, global head of policy at TRM Labs, noted a concerning rise in market manipulation attacks within the cryptocurrency industry, where attackers exploit vulnerabilities in how decentralized finance protocols value collateral.
"These are now one in eight crypto hacks, up from one in 17 in 2022, with 32 incidents so far this year," Redbord stated. "The vulnerability is in how protocols value collateral."