BTC $78,174.72 +0.59%
ETH $2,451.48 +0.55%
BNB $692.79 +0.42%
XRP $1.39 +0.94%
SOL $105.24 +1.04%
TRX $0.3408 -0.23%
DOGE $0.0851 -0.03%
ADA $0.2014 -0.24%
BCH $246.77 -0.50%
LINK $11.43 +0.15%
HYPE $83.41 +3.28%
AAVE $125.48 +3.07%
SUI $0.7433 +0.52%
XLM $0.1791 +0.32%
ZEC $841.24 +5.05%
BTC $78,174.72 +0.59%
ETH $2,451.48 +0.55%
BNB $692.79 +0.42%
XRP $1.39 +0.94%
SOL $105.24 +1.04%
TRX $0.3408 -0.23%
DOGE $0.0851 -0.03%
ADA $0.2014 -0.24%
BCH $246.77 -0.50%
LINK $11.43 +0.15%
HYPE $83.41 +3.28%
AAVE $125.48 +3.07%
SUI $0.7433 +0.52%
XLM $0.1791 +0.32%
ZEC $841.24 +5.05%

x

All
Article
Flash

first_img Cosmos Labs admits to misjudging a vulnerability, resulting in an attack on six chains with a loss of 5.7 million dollars

Cosmos Labs released a technical report, admitting that it previously misjudged an integer underflow vulnerability in the Cosmos EVM, which led to attacks on six blockchain networks between August 20 and 25, resulting in a total theft of approximately $5.7 million in tokens. The attacker exploited the vulnerability to underflow account balances to the maximum value of 2^256-1, then performed a reverse operation to transfer the inflated balance out, thereby stealing tokens from the target accounts without creating tokens out of thin air.The report shows that researchers submitted the defect through a bug bounty program on April 25, but testers were unable to reproduce it on the existing Cosmos chain configuration, so Cosmos Labs silently patched it in May. Independent researchers confirmed in early August that the vulnerability affected all Cosmos EVM chains, and Cosmos Labs released a patch on August 19, but the first attack occurred about 20 hours later.In terms of specific losses, MANTRA lost 720.9 million tokens (approximately $3.6 million), TAC lost nearly 3 billion TAC, and KiiChain lost about 148 million KII. Both MANTRA and KiiChain criticized Cosmos Labs for not notifying the affected chains in advance and suggesting a shutdown, with KiiChain stating that the patch would take several days to deploy while a shutdown would only take a few minutes. Cosmos Labs stated that it has coordinated responses with 40 chains and assisted 13 chains in completing repairs or shutdowns before being attacked.
app_icon
ChainCatcher Building the Web3 world with innovations.