Attacker Steals $50 Million in NES, Only Profits $60,000
The attacker exploited a vulnerability in the Cosmos EVM shared module to steal $50 million worth of NES tokens, but ultimately only made a profit of about $60,000. Cosmos Labs had previously reported a security flaw in its shared Cosmos EVM software, affecting multiple chains built on that module, including Nesa. The main attacker, with an address starting with 0x9AE7, had previously spent $250,000 to purchase NES and cross-chain it to Nesa Chain. They then exploited the vulnerability to inflate their account balance by 200 times, transferring $50 million in NES back to Ethereum, with the initial funds coming from Monero. The attacker dispersed the tokens across multiple wallet addresses, exchanged NES for ETH on a DEX, and then deposited the proceeds into a centralized exchange. Due to the rapid withdrawal of funds from the liquidity pool, most of the attacker's exchange transactions faced severe slippage, resulting in an actual expenditure of $255,000 to initiate the attack, while only cashing out $315,000, yielding a net profit of about $60,000. Bubblemaps noted that although another Cosmos EVM chain had suffered a similar attack of $1.4 million the day before, the differences in funding sources and operational methods suggest that the two incidents may have originated from different attackers. The report mentioned that the price of NES tokens plummeted by 90% at one point but has since rebounded significantly, with the team believing that the recovery is mainly due to arbitrage activities resulting from price mismatches between DEX and CEX after the attack.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Cosmos Labs Faces Criticism Over Disclosure Bug Issue, Leading to Recommendations for EVM Chains to Halt Operations

Cosmos EVM Module Faces Security Incident, Multiple Chains Affected

Virtuals Strengthens Wallet Security Policies for AI Agents

Cryptocurrencies: Michael Saylor Declares the 'Bitcoin Reformation'

OCC overhauls bank supervision and enforcement rules

Is Strategy Becoming a Market Indicator? Are the Gears Starting to Turn?

Galaxy adds 24/7 emergency services at Helios

Users report issues with cursors and wallpapers after installing Windows 11 KB5120998

Iran Sets Conditions and Demands Compensation to Reopen Hormuz Strait

XRP Ledger Surpasses 5 Billion Transactions: Rapid Influx of RWA Surpasses Ethereum and Accelerates Growth

Ethereum’s plan to triple network speed could silently break millions of existing smart contracts

Wall Street Morning Report: Nvidia Breaks the 'Earnings Day Curse', Software Stocks Dismiss 'SaaS Apocalypse', Jackson Hole Tonight May Set the Tone for the Second Half of the Year

Long-term Interest Rates Expected to Rise Again, Dependent on Warsh's Speech Signals

NBU Investigates Banks Involved in Collateral for Halushchenko: What We Know

Comparing 5g Gold Bars and Satoshis: Differences in Physical Premium and On-Chain Storage

Ledger rejects hack claim after OneKey recreates bug

TradFi Payments and Stablecoin Remittance Rails: How PayPal, USDT, and USDC Are Changing International Transfers

Five Charts to Understand the Starting Point of the Bitcoin Bull Market in 2026

Bitcoin Miners' Shift to AI: How IREN and Semiconductor Giants (MU, NVDA) Are Redefining Hashrate Economics

What is being said at the tables: full official attention to the dollar-inflation duo and investors like Marcelo Gallardo, "with the guard up"

EASY Residency Season 4 List Released, 9 Projects Have Interactive Opportunities

8 Years of 'Friendship': Internet Celebrity Di Shi Reveals He Was Defrauded of Millions by Sun Zeyu

Hash Global: After BTC, Who Will Take the Baton for the Next Bull Market?

Roman Storm's retrial postponed to April 2027

What Does the 'Niche Market' of Gold Mean?

Historically Unique: An Asset with 100% Winning Rate Over 4 Years

Potential Taxable Activities for Cryptocurrencies in 2025 Estimated at Approximately 73 Trillion Yen = Chainalysis

Credit Card Expenses in Dollars: The Best Way to Pay the Bill and Avoid Extra Charges

Anthropic AI Hardware Control Achieves 99.3% Success Rate in Tests







