<![CDATA[🔴 Critical: Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable]]>Cosmos Labs has disclosed that a critical balance-handling flaw in the shared Cosmos EVM module was actively exploited to drain funds from six different blockchains between August 20 and August 25, 2026. The issue, tracked as GHSA-7g4w-cg88-2cq2, has been rated Critical by the team, though the advisory was published without a CVE identifier, a weakness classification, or a CVSS score.

The vulnerability impacts versions < 0.6.2 and >= 0.6.2 (with the patch applied in a later release). According to the advisory, the flaw resides in how the module handles balance adjustments, allowing an attacker to manipulate accounting logic under specific conditions.

  • Affected versions: All releases prior to the patched 0.6.2 update.
  • Exploitation window: August 20–25, 2026, across six unnamed chains.
  • Impact: Unauthorized draining of funds due to incorrect balance state transitions.

Cosmos Labs has urged all operators running the EVM module to upgrade immediately, as the issue is known to be exploitable in the wild. No further technical specifics or indicators of compromise were shared in the public notice.

Source: The Hacker News

Is your team already running the patched 0.6.2 build, or are you still assessing exposure across your chain's validators?

]]>https://xploitlk.com/topic/138/critical-cosmos-evm-flaw-exploited-after-cosmos-labs-knew-every-blockchain-running-it-was-vulnerableRSS for NodeSat, 05 Sep 2026 13:29:08 GMTSat, 29 Aug 2026 04:30:22 GMT60