Cronos confirmed that $9.19 million remains unrecovered after an attacker manipulated TONIC collateral to borrow roughly $120.4 million from Tectonic across nine lending markets on Aug. 30. The attacker began deploying contracts at 12:38 UTC and executed the borrowing transaction at 12:49 UTC, before Cronos identified irregular activity at 13:25 UTC. Validators halted the network at block 90,907,150 and restored it to block 90,896,188, reversing about $111.2 million and discarding 10,961 blocks, or 1 hour and 54 minutes of transaction history. The funds that could not be restored had already moved off Cronos before the halt, representing 7.6% of the borrowing event. The official accounting exceeded earlier estimates of about $75 million affected and put off-network transfers above the $8.3 million previously traced to Ethereum by Bitquery. All transactions in the discarded window, including unrelated activity, were reversed, while exchanges, bridges and other off-chain platforms continue reconciling abandoned-chain transactions.