Cryptopolitan Cosmos EVM Module Security Incident Halts Multiple Chains
Article Content
- •Cosmos Labs confirmed a security incident affecting its EVM module on August 24, 2026.
- •KiiChain lost over 148 million KII tokens due to repeated exploitation of vulnerabilities.
- •Affected chains, including TAC and MANTRA, were advised to halt operations while investigations continue.
On August 24, 2026, Cosmos Labs confirmed a security incident affecting its EVM module, prompting affected chains, including KiiChain, TAC, and MANTRA, to halt operations. KiiChain reported a significant loss of 148,326,583.15 KII tokens due to an attacker exploiting vulnerabilities in the shared module. TAC experienced a similar incident, draining a single account before halting its chain. MANTRA halted its operations as a precaution and later resumed after deploying a patch. Cosmos Labs has not disclosed specific vulnerability details or the total losses incurred. The situation follows earlier security issues in 2026, including a $7 million exploit in January. A full incident report is expected once the investigation concludes, and affected networks are advised to coordinate validator upgrades. The incident has raised concerns about the security of the Cosmos EVM infrastructure.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (25)
Following this threat?
Track Cosmos Labs in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…