Tectonic Suffers $120.4 Million Loss from Token Manipulation
An attacker inflated Tectonic's TONIC token and borrowed against it, leading to significant losses. A rollback recovered most of the funds, but a portion remains unrecovered.
An attacker manipulated Tectonic's TONIC token, inflating its value by approximately 300 times. This allowed the attacker to borrow $120.4 million against the inflated collateral. The incident highlights vulnerabilities in the token's valuation and borrowing mechanisms.
In response to the attack, Cronos executed a rollback of 10,961 blocks, successfully recovering $111.2 million of the lost funds. However, $9.19 million had already exited the chain and remains unrecovered. This incident demonstrates the potential for significant financial loss through manipulation of token values.
The specific blockchain on which this incident occurred is not stated, which limits the ability to trace the transactions directly. The on-chain record does not provide addresses, so further details about the flow of funds cannot be determined from the available information.
Addresses in this incident
| Address | Chain | Role | Check |
|---|---|---|---|
| 0xc404160B79BD8905061a1cAecBeCa2EEab3f72DD | ETH | mentioned in coverage | Check live |
| 0xfDb11781ee3818135eebd2acd2247C263e266652 | ETH | mentioned in coverage | Check live |
| 0x6dF89C42f0ABdfAA2B5b77EdCdAFbc945eD6Ee6c | ETH | mentioned in coverage | Check live |
| 0x7560E936a6978aD4ecDA6b395f4c7D1c65F8A595 | ETH | mentioned in coverage | Check live |
| bc1p7hqkhznmh0shwz6h28rupftkj2j99z9p8m3wte7ks22fvc8gppvq9ny4gs | BTC | mentioned in coverage | Check live |
| bc1px9kxzpc7lq9hmesasg2ul3kqxr03vnaj2fx5802pmjv9e564gf5s34g3tu | BTC | mentioned in coverage | Check live |
| 0x14cDf9C1F8Df4136259B508B72ece77DEBB69635 | ETH | mentioned in coverage | Check live |
| 0x363573eFd24C980Df9Da95782c9b261A41011E91 | ETH | mentioned in coverage | Check live |
| 0x16470a8beB6FEBF80B6574B89f1E9cD08d6F85F6 | ETH | mentioned in coverage | Check live |
| 0xc89Cd0Dc762c3297180D9CfB3AF2641910cFA00D | ETH | mentioned in coverage | Check live |
| 0x46fC5C449c7af7311ba5B9011868eF8701aa7baF | ETH | mentioned in coverage | Check live |
| 0xD2078bA5bE7a7e0b5E23763EC0C802A21D13AC6b | ETH | mentioned in coverage | Check live |
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.
