Cosmos Labs Releases EVM Module Security Incident Report: 6 Chains Attacked, Losses ~$5.72 Million

August 30 news: Cosmos Labs has released an analysis report on the EVM module security incident. Between August 20 and August 25, attackers exploited a Cosmos EVM vulnerability to steal funds from multiple Cosmos chains. After MANTRA first alerted the team, Cosmos security personnel coordinated with approximately 40 chains to assess risks and deploy mitigation measures. Six networks were attacked, with approximately $2.87 million in assets bridged and sold on DEXs; an additional ~$2.85 million in assets were sold on CEXs, and the CEX accounts used by the attackers have been frozen pending investigation. Another 13 potentially at-risk networks completed patches, chain halts, or other protections in time, with no further losses reported. The vulnerability was originally reported via the bug bounty program as early as April 25.