An attacker pumped TONIC about 100 times in 20 minutes to borrow against it, and Cronos halted its blockchain with all but $6 million still on-chain.