Cosmos EVM Hit by Security Incident as Chains Urged to Halt Validators

Cosmos Labs confirmed an ongoing security incident affecting the Cosmos EVM module and has advised connected chains to request validator halts while security teams investigate; no vulnerability details, affected chain names or loss figures have been disclosed and a post-mortem is promised. The incident compounds 2026 security problems after a January SagaEVM exploit that cost $7 million and August outages where MANTRA halted block production for roughly 30 hours (resuming Aug 22 after a patch) and TAC reported an exploit affecting token supply, leading to sharply reduced Cosmos token trading and pressuring confidence across crypto, DeFi and EVM adoption.

See what traders are focused on

Cosmos Labs has confirmed an ongoing security incident affecting users of its Cosmos EVM module. The company’s security and engineering teams are actively responding, and chains connected to the Cosmos EVM that are in with Cosmos Labs have been advised to instruct their validators to halt operations immediately while the situation is investigated.

No specific vulnerability has been disclosed publicly, and no affected chain names have been confirmed. Also, no loss figures have been released. Moreover, Cosmos Labs has committed to publishing a full post-mortem analysis once the incident is resolved. Validators and developers across the ecosystem will be watching that document closely to determine when it’s safe to resume normal operations.

The Cosmos EVM ecosystem has had a difficult 2026 on the security front. The first major incident came in January, when an exploit involving the SagaEVM implementation caused approximately $7 million in losses.

In addition, Cosmos Labs identified 15 chains running code containing the relevant vulnerability at the time; six had not enabled the affected feature, one was exploited, and the others managed to mitigate before attackers could act.

August has brought further disruption. MANTRA Chain halted block production for roughly 30 hours following an incident involving its Cosmos EVM module before resuming operations on August 22 after deploying a patch.

Furthermore, TAC also halted its chain on the same day after reporting an exploited vulnerability affecting its Cosmos-based EVM environment and token supply.

The immediate market reaction has been sharp. Cosmos token trading has experienced significantly reduced activity. It was a direct reflection of the uncertainty surrounding the incident’s scope and resolution timeline.

Until the post-mortem is published and the vulnerability is understood, confidence across the Cosmos EVM ecosystem will remain under pressure. The speed and transparency of Cosmos Labs’ incident report will determine how quickly that confidence returns.

Crypto Market Highlights

AAVE Price Powers 7% Higher: How Far Can the Rally Run?