Bearish
Cosmos Labs acknowledges misjudgment of critical EVM bug leading to $5.7 million exploit
Cosmos Labs admitted to misjudging a critical vulnerability in its EVM module, which was exploited across six blockchain networks between August 20 and August 25, 2026, resulting in approximately $5.7 million in stolen assets. The flaw, an integer underflow, allowed attackers to manipulate account balances and extract tokens without minting new ones. This incident underscores the challenges in securing a multi-chain ecosystem and highlights the need for more robust security practices.
Key points
- Cosmos Labs misjudged a critical EVM vulnerability, leading to a $5.7 million exploit.
- The vulnerability was reported in April but was not addressed promptly, allowing attacks to occur in August.
- Cosmos Labs has pledged to improve its vulnerability response and conduct a comprehensive security audit.
Sources
- Cosmos Labs Admits It Misjudged A Critical EVM Bug Later Used In $5.7 Million Six-Chain ExploitCrowdfund Insider · September 1, 2026
- Cosmos Labs says it wrongly cleared the bug behind a $5.7 million six-chain hackThe Block · August 29, 2026
- Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was VulnerableThe Hacker News · August 28, 2026
- Cosmos EVM Bug Cleared Before $5.7M Six-Chain HackCryptoDaily · August 30, 2026
AI-generated from public news sources. Not financial advice.
