Crypto.com-linked lending platform hit by $74m exploit

A cybercriminal has drained a staggering $6 million from Tectonic, a decentralized lending platform connected to Crypto.com. The attacker inflated the value of Tonic, the platform's native token, by 300 times in just 20 minutes and then used the inflated tokens as collateral to borrow over $74 million worth of other assets. PeckShield, a blockchain security firm, revealed the exploit on Sunday.

Validators overseeing the Cronos blockchain immediately halted trading after discovering the attack. Kris Marszalek, CEO of Crypto.com, assured users that the exchange itself was not impacted and that all customer funds remained secure. Security experts noted that this economic attack, exploiting weak risk controls, is distinct from the technical code vulnerabilities typically found in blockchain projects.

This incident follows a series of significant decentralized finance exploits in 2026, including a $300 million drain from a restaking protocol in April, which triggered a liquidity collapse on Aave, the largest decentralized lending protocol. The Tectonic attack underscores the potential financial repercussions of vulnerabilities in crypto platforms, particularly within Nigeria's burgeoning crypto ecosystem.

It highlights how economic weaknesses in decentralized lending protocols can be exploited, adding a new layer of risk to the rapidly evolving digital payment and banking landscape. Recent reports indicate that Nigerian bank customers lost a cumulative ₦134.48 billion to fraud between 2020 and 2025, with criminals constantly adapting their tactics as payment channels evolved.