Cosmos Labs Faces Criticism Over Disclosure Bug Issue, Leading to Recommendations for EVM Chains to Halt Operations
Cosmos Labs Faces Criticism Over Disclosure Bug Issue, Leading to Recommendations for EVM Chains to Halt Operations
A serious security flaw has been discovered in the shared modules that make up the Cosmos EVM infrastructure, resulting in multiple blockchain networks being affected by attacks that exploited this vulnerability.
Specifically, it is believed that vulnerabilities arose from a combination of several upstream defects, including calculation errors in staking processes, such as underflows. Among the affected networks, MANTRA and Nesa were able to prevent direct impacts on user funds through proactive chain halting measures.
On the other hand, KiiChain suffered a loss of approximately 150 million KII, equivalent to about $9 million at the time's theoretical price (around 1.43 billion yen), leading to a collapse in token prices. Additionally, around 3 billion TAC, worth approximately $7.5 million (about 1.19 billion yen), was withdrawn from staking contracts, resulting in significant losses being reported.
Growing Criticism from the Community Regarding Disclosure Practices
In this series of incidents, the most strongly criticized aspect by the security community in the cryptocurrency industry and the affected projects is the information-sharing process of Cosmos Labs, the module developer.
After the situation was revealed, Cosmos Labs urgently recommended the halting of EVM chain operations for the affected networks. However, the disclosure of vulnerability fixes that occurred prior to this was handled in a manner close to a silent patch model (post-fix without public disclosure), which has been criticized as extremely inadequate.
Delayed Response and Future Challenges
According to a verification report published by KiiChain, when a critical patch was made public in mid-August, individual notifications were not sent to the affected chains in advance, and there was insufficient warning regarding the importance of the update. As a result, attackers were able to exploit the vulnerability before the patch was applied, having analyzed the code updates.
It has been pointed out that if clear emergency halting measures had been communicated after prior non-public notifications, the damage could have been minimized. Cosmos Labs plans to submit a detailed incident report, but this case has left significant challenges regarding the coordination and disclosure processes of vulnerability information among infrastructure providers in the industry.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Attacker Steals $50 Million in NES, Only Profits $60,000

Cosmos EVM Module Faces Security Incident, Multiple Chains Affected

A Practical Guide to FOMO: How to Find People and Coins in Social Trading?

Alpaca Partners with Kalshi to Add Prediction Markets to Its Stock and Cryptocurrency Infrastructure

Crypto May Be in a Very Good Selective Buying Window

Park Young-sun: "The Second Act of the AI Economy Begins... Agents, Stablecoins, and Physical AI"

Cronos restarts network after emergency halt over Tectonic exploit

NOT A HOTEL Announces Collaboration with Pokémon

Ripple unlocks 1B XRP as escrow falls to 31.28B

Latest Non-Farm Payroll Forecast: Job Growth May Slow, Fed Faces Complex Choices

$40 Trillion U.S. Debt Alarm Sounds, BlackRock Unexpectedly Bullish on Bitcoin and Gold

Russia opens regulated crypto trading as new law takes effect

What is liquidation? The trading minute

Crypto: The Clarity Act has only a 13% chance of being adopted

Digital Day: What Professions Are Lacking in the Crypto Market and Where to Acquire Them

SEC to Accept Public Comments on Crypto Asset Regulation Until October 20

CME launches crypto indexes tracking XRP, SOL, HYPE and other altcoins

KuCoin Ventures Weekly Report: Waller Strengthens Rate Hike Expectations, ETF Funds Significantly Flow Back, RWA Narrative and Attention Assets Reshape the Crypto Market

Coincheck G Partners with French DFNS to Explore Custody Solutions for Institutional Investors

Monthly Column Report | Foresight News Outstanding Content Creators List for August 2026

Singapore proposes new stablecoin rules covering foreign issuers and interest

SEC and FDA sign 3-year market integrity pact

Rising Yield on Japan's 2-Year Bonds; Does Yen Carry Trade Threaten Bitcoin Again?

Hyperliquid in Talks with Kraken's Parent Company Payward for U.S. Expansion

Why Was the Messi Retirement Token Issued Without Liquidity?

US Open Partners with Kalshi for Last-Minute Deal, Officially Introducing Prediction Market

Are Stablecoins Really "Stable"? Considering Redemption, Settlement, and Revenue Structures ("So That's How It Is Blockchain Ep.15" Yoshihiko Uchida, Yuya Sakai, Shinya Otsuga)

The Short Squeeze Logic of Meme Stocks Moves from NYSE to the Robinhood Chain

Sui to Host 'Basecamp 2026' in Singapore, Highlighting Agentic Economy



