Cosmos Labs Faces Criticism Over Disclosure Bug Issue, Leading to Recommendations for EVM Chains to Halt Operations
Cosmos Labs Faces Criticism Over Disclosure Bug Issue, Leading to Recommendations for EVM Chains to Halt Operations
A serious security flaw has been discovered in the shared modules that make up the Cosmos EVM infrastructure, resulting in multiple blockchain networks being affected by attacks that exploited this vulnerability.
Specifically, it is believed that vulnerabilities arose from a combination of several upstream defects, including calculation errors in staking processes, such as underflows. Among the affected networks, MANTRA and Nesa were able to prevent direct impacts on user funds through proactive chain halting measures.
On the other hand, KiiChain suffered a loss of approximately 150 million KII, equivalent to about $9 million at the time's theoretical price (around 1.43 billion yen), leading to a collapse in token prices. Additionally, around 3 billion TAC, worth approximately $7.5 million (about 1.19 billion yen), was withdrawn from staking contracts, resulting in significant losses being reported.
Growing Criticism from the Community Regarding Disclosure Practices
In this series of incidents, the most strongly criticized aspect by the security community in the cryptocurrency industry and the affected projects is the information-sharing process of Cosmos Labs, the module developer.
After the situation was revealed, Cosmos Labs urgently recommended the halting of EVM chain operations for the affected networks. However, the disclosure of vulnerability fixes that occurred prior to this was handled in a manner close to a silent patch model (post-fix without public disclosure), which has been criticized as extremely inadequate.
Delayed Response and Future Challenges
According to a verification report published by KiiChain, when a critical patch was made public in mid-August, individual notifications were not sent to the affected chains in advance, and there was insufficient warning regarding the importance of the update. As a result, attackers were able to exploit the vulnerability before the patch was applied, having analyzed the code updates.
It has been pointed out that if clear emergency halting measures had been communicated after prior non-public notifications, the damage could have been minimized. Cosmos Labs plans to submit a detailed incident report, but this case has left significant challenges regarding the coordination and disclosure processes of vulnerability information among infrastructure providers in the industry.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Attacker Steals $50 Million in NES, Only Profits $60,000

Cosmos EVM Module Faces Security Incident, Multiple Chains Affected

Over 100 Companies Urge Strengthening of AI Cyber Defense

Mantle stablecoins and tokenized assets reach $880M

DefiLlama Ranks 128 Cryptos: Only One Receives AAA Rating

Villa Soldati: The CABA Neighborhood with the Highest Delinquency Rate

Mysterious $23 Million Bitcoin-Monero Swap: The Viral Video That Raises Questions

Bitcoin’s bottom signal is flashing, but six months of data shows a trap waiting for early buyers

Project that Turns Recycling into Income Wins UNICEF's Youth Challenge Blockchain

ATF Confirms Major Incident Following Qilin's Appearance on Its Leak Site

Encrypted Code Reveals $44 Million Transactions in a 'Cold Wallet' Linked to Cerimedo

Is the Jackson Hole central bank retreat now a crypto conference?

Stable Sea adds 2 WisdomTree funds for corporate cash

Nvidia Earnings Beat and Gold Price Outlook: How Jackson Hole Could Move NVDA and Gold

Votorantim Exchanges Nexa for $1.3 Billion Stake in Boliden

Youth May Have to Spend Up to 76% of Their Salary on Rent: Where Housing is Most Expensive

Coinbase Opens Real Estate to Millions of Bitcoin Holders

"Exit from Closed Systems". What Will Change in the CFA Market from September 1

The dollar takes a breather after the price fixing for bond payments linked to the exchange rate

Correlation Trading Pairs to Propel AMM into Larger Markets, Founder Explains

Banking Processing in the New Reality: Digital Ruble and Cryptocurrencies for Foreign Trade

QA and Intelligent Automation: Banks and Insurers Drive Demand in Brazil

Postquant Labs launches the first quantum cross-chain swaps

The SEC Sends Its Overhaul of Crypto Custody Rules to the White House Without Revealing the Content

8-12% Promised, 5-6% Received: Expert Discusses Real Estate Returns in Europe

Community Banks Warn Clarity Act Could Drain Up to $47 Billion in Deposits if Stablecoin Yield Clause Remains

"Wallet Killers" in Your Browser: 40 Malicious Firefox Extensions Stealing Your Private Keys

Countdown for FAL: A showdown between banks and brokerage firms to attract companies

Investor Becomes Multimillionaire After Recovering 61 Bitcoins Purchased in 2011



