News linked to both this project and an event.
据 Cointelegraph 报道，安全公司 Hacken 发布 2026 年 Q3 报告显示，第三季度加密货币黑客攻击事件共 107 起，总损失达 11.8 亿美元，为 2025 年 Q1 Bybit 事件（损失 16 亿美元）以来最严重的季度。 其中 77%（约 9.06 亿美元）损失源于第三方供应商、开发工具或未纳入安全审计的基础设施漏洞。四大主要事件分别为：Bitget 黑客攻击（3.87 亿美元）、Liquid Network 漏洞（3.2 亿美元）、Tectonic 漏洞（1.2 亿美元）及 Coldcard 固件漏洞（1.15 亿美元），合计占总损失约 80%。智能合约为最高频攻击向量，涉及 71 起事件，损失 2.28 亿美元。 在资金追回方面，约 3.87 亿美元（33%）被归还或逆转，其中"白帽黑客"归还 Liquid Network 被盗资金 2.72 亿美元，Cronos 验证者回滚 114 分钟区块链历史追回 1.11 亿美元；运营商另行垫付 4.1 亿美元补偿用户损失，但仍有约 3.84 亿美元（32%）既未追回也未获赔付。
Odaily News: Security firm Hacken disclosed that a total of 107 cryptocurrency hacking incidents were recorded in Q3 2026, with total losses amounting to $1.18 billion. Of that, approximately $906 million stemmed from compromised vendors, developer tools, disclosed but undeployed fixes, and infrastructure outside audit scope, accounting for roughly 77% of quarterly losses.Quarterly losses were mainly concentrated in four incidents: crypto trading platform Bitget suffered $387 million in losses from an attack, Liquid Network lost $320 million to exploitation, Tectonic lost $120 million to exploitation, and a Coldcard firmware vulnerability caused approximately $115 million in losses. About 80% of losses were concentrated in the above incidents, while 98 incidents resulted in losses below $10 million, with a median of $670,000.Smart contract incidents were the most common attack type, involving 71 incidents and causing $228 million in losses. Q3 was the most severe quarter for losses since Q1 2025, when a $1.4 billion loss by Bybit pushed the quarterly total to $1.6 billion.Approximately $387 million of Q3 losses were returned or reversed, accounting for about 33% of gross losses. Among these, about $272 million was returned in the Liquid Network incident; the Tectonic incident reversed approximately $111.2 million in lending impact by rolling back 114 minutes of blockchain history, and Circle and Tether also froze approximately $340,000 related to funds stolen from Bitget. Operators additionally absorbed $410 million in user losses, leaving approximately $384 million still not returned or covered. (Cointelegraph)
According to the post-incident report released by Tectonic, the Cronos blockchain lending protocol Tectonic suffered an oracle manipulation attack at 12:49 UTC on August 30, 2026. By repeatedly borrowing and re-collateralizing TONIC tokens 98 times within a single transaction, the attacker drove up the TONIC collateral price by approximately 195 times. Leveraging this artificially inflated value, they subsequently extracted assets with a nominal value of $120.4 million from nine lending markets, spanning USDC, USDT, WBTC, WETH, and other assets. The attacker then bridged the stablecoins to Ethereum and converted them to ETH, while selling the remaining assets for CRO on the Cronos chain before withdrawing them. Approximately $9.19 million in total successfully escaped before the network halt. At 14:32 UTC, Cronos validators emergency-paused the network, rolling back the on-chain state to pre-attack conditions and restoring assets still held on Cronos. Currently, Tectonic's supply and borrowing functions remain suspended, while withdrawal and repayment capabilities continue normally. Tracing efforts for the stolen funds are being coordinated by blockchain forensics firms, law enforcement agencies, and stablecoin issuers, with freeze requests already filed with the relevant issuers.
Odaily News: Blockchain intelligence firm TRM Labs reports that 32 price manipulation attacks have been recorded in 2026, surpassing the total of any previous full year; 2025 saw 12 incidents throughout the year. Such attacks account for roughly one-eighth of hacker incidents, up from one-seventeenth in 2022.Attackers typically first inflate the price of low-liquidity tokens, then use them as collateral to borrow other assets from lending protocols. Subsequently, they cause the collateral price to plummet and abandon the collateral, potentially leading to bad debt in the lending pools.According to DeFiLlama data, the total value locked in crypto-collateralized lending protocols has grown by approximately 56% over the past two years, approaching $50 billion, with active loan volume nearing $29 billion. The sector currently hosts over 570 lending protocols.Recently, Tectonic suffered losses exceeding $70 million after the TONIC price was artificially inflated, with the attacker ultimately extracting approximately $6 million in assets after the Cronos chain was rolled back; Moonwell also previously incurred losses of around $8.7 million due to manipulation of the MAMO oracle price. (Bitcoin.com News)
According to PeckShieldAlert, the cryptocurrency industry saw 50 major attack incidents in August 2026, an increase of 67% over the 30 incidents in July. Total losses reached approximately $136.3 million, a 49.5% decrease from the $270 million in July. The Tectonic.cro incident caused approximately $74 million in losses, ranking as the fourth-largest crypto theft of the year, behind only attacks associated with Drift, KelpDAO/LayerZero, and COLDCARDwallet. The attacker managed to cross-chain only around $6 million to Ethereum before Cronos suspended its entire network, leaving the rest of the funds mostly stranded on Cronos. The attacker has since started laundering the illicit proceeds and bridging a portion to Bitcoin, amounting to roughly $200,000 to date. Other significant attack incidents in August involved Moonwell, Termlabs, Coinsbuy, TAC, Injective, MANTRA, BounceBit, Cosmos Labs, and aquifer.
According to an official tweet from Cronos Network, the Cronos network was previously affected by a vulnerability exploit targeting the Tectonic protocol. Validator consensus triggered an emergency halt to block production to protect user assets. The on-chain state has been rolled back to pre-exploit levels, and the network resumed block production at 07:49 Beijing Time on August 31, 2026, starting from block height 90,896,189. Node operators can now upgrade to Cronos v1.7.8 and use the latest mainnet snapshot to restart their nodes. The network remains under continuous monitoring, with select protocols, RPC providers, block explorers, and cross-chain bridges gradually recovering. A full post-mortem report will be released by the team in the near future.
PeckShieldAlert monitoring indicates that Tectonic was attacked on the Cronos Network, resulting in total losses of approximately $74 million. Following the incident, Cronos has halted the entire chain. Prior to the halt, the attacker successfully bridged only about $6 million to Ethereum, while the remaining approximately $60 million remains stranded on Cronos, with an additional $8 million in funds held in Cronos addresses.