37.96M MANTRA Tokens Frozen Following $3.6M Theft via Cosmos EVM Vulnerability

Odaily Planet Daily reports that MANTRA released a security incident report dated August 20, stating that an attacker exploited an integer underflow vulnerability in the Cosmos EVM to transfer 720.924 million MANTRA tokens from two addresses, equivalent to approximately $3.6 million at $0.005 per token. Of this amount, 600 million tokens were transferred from a burned address and 121 million from the genesis multisig address. The attack did not involve validator or administrator keys. The vulnerability was patched on the development branch on May 15 and merged into the release branch on August 19. The first anomalous transfer occurred on August 21 at 11:06 (UTC+8); MANTRA Chain was halted at 15:13 (UTC+8) and restarted on August 22 under version v8.4.0. Of the stolen funds, 683 million tokens have been transferred to exchange deposit addresses, while 37.96 million tokens have been frozen, and recovery efforts are now under law enforcement investigation.