Home›Crypto›Market Structure›Cosmos Labs urges EVM chains to halt and patch after m…

Cosmos Labs urges EVM chains to halt and patch after multi-chain exploit

Cosmos Labs said public chains running older Cosmos EVM module versions should stop immediately and upgrade, after attacks from Aug. 20 to Aug. 22 drained three networks, including KiiChain.

Reported · Written up by our desk · Market Structure

Cosmos Labs urged operators of any public blockchain running a Cosmos EVM module below version v0.6.2 or v0.7.2 to immediately halt the chain and upgrade to releases that include patches, adding that teams without security contacts should email security@cosmoslabs.io to receive critical updates. The guidance was posted Tuesday at 11:19 a.m. New York time, according to The Defiant.

The recommendation relates to attacks on three chains that share one open source codebase, MANTRA, TAC, and KiiChain, which were targeted between Aug. 20 and Aug. 22. Two of the three networks are still frozen, and Cosmos Labs has published no security advisory for the flaw.

KiiChain provided the only reported figures on damage, saying an attacker drained 148 million KII from wallets on Aug. 22 by repeating the same technique 18 times against different targets. The chain halted at block 9,355,723 at 22:50:58 UTC, and a public node still showed that block as the tip about 66 hours later.

KiiChain said about 80.7 million KII, or 54.4%, is in attacker addresses and is immobilized, to be moved to recovery wallets at restart, while 67.6 million was bridged to BNB Smart Chain through Hyperlane. Of that bridged amount, KiiChain said 64.6 million was sold on decentralized exchanges for roughly 1.61 million BUSD, and another 3 million went to a KuCoin deposit address with recovery confirmation still pending, per the incident report described by The Defiant.

Latest closeBNB $695.25 ▼1.2%

More like this

Sources