Cosmos EVM security flaw exploited

Aug 20-25, attackers exploited a Cosmos EVM integer underflow flaw to steal $5.7M across six chains. MANTRA lost 720.9M tokens ($3.6M), TAC lost 3B tokens, and KiiChain lost 148M KII. Cosmos Labs patched the flaw on Aug 19 but attacks began 20 hours later.

avatar

⚠️ $PUMP /USDT DAILY BEARISH ALERT — MOMENTUM SHIFTING


$PUMP is trading around $0.004467 after a 1D MACD bearish crossover, signaling that bullish momentum is losing strength and sellers may be preparing for another push lower. The immediate structure looks cautious, especially while price remains below the key resistance zone.


📍 Support: $0.004247 → $0.004103

🚧 Resistance: $0.004665 → $0.004939 → $0.005083

🎯 Next Target: $0.004247 first, then $0.004103. A decisive breakdown could expose $0.003829.


The current technical data also shows a bearish bias, with multiple indicators leaning toward sell signals.


💡 Pro Tip: Don’t chase a short directly into support. Wait for a confirmed daily close below $0.004247, ideally with rising volume. If $PUMP reclaims $0.004665 and holds above it, the bearish setup could weaken and a recovery toward $0.004939–$0.005083 may develop.


⚠️ MACD signals can lag. Manage risk and confirm price action before entering.#Fed rate hike odds rise #Cosmos EVM security flaw exploited

avatar

Cronos halted block production following an exploit on the Tectonic protocol targeting $75 million. Validators froze the chain fast enough to trap most of the stolen capital on network.

avatar

The fastest #Cosmos EVM just halted. Cronos pushed block times down to ~430–490ms with only 28 validators and heavily optimized infrastructure. Now it has halted amid the ongoing Cosmos EVM security incident. For HFT, speed alone isn’t enough. The next generation needs sub-70ms consensus + architecture built for trading and resilience from day one.

avatar

Polygon has resolved a series of security vulnerabilities on its network through two hard forks: Austin and Kyoto. The vulnerabilities were found in two software components, Bor and Heimdall, which could cause network congestion or overload validators—particularly the critical Heimdall flaw, which risked overloading validators and disrupting the entire network. Polygon stated that the issues were patched prior to public disclosure, and no exploits have been detected on mainnet.

avatar

In the last hour the Fogo Mainnet has been temporarily halted as a precautionary measure following the detection of unauthorized activity. The halt is being initiated to prevent further movement of the affected assets. During the halt, the network will be upgraded to restrict the addresses associated with the incident. We’ll share further updates as soon as more information is confirmed. Please rely only on this Fogo channel for updates.

avatar

☕️ Morning Liquidity Polygon quietly patched security flaws in recent hard forks, no market panic, but it’s a reminder that trust in these chains is fragile. $SOL and $ZEC are drawing real volume while $BTC sits flat on thin participation.

avatar

⚠️ Polymer sequencer centralization and ibc bugs — August 30 ⚠️ hey fam the polymer ibc hub launch and the sequencer centralization concerns are completely frustrating the cosmos interoperability meta and retail bridge users are getting slammed by failed transactions. polymer launched as the premier ibc hub on ethereum promising to bring the cosmos interoperability standard to every evm rollup without requiring each chain to implement their own ibc light clients. the community rushed in to bridge assets between optimism arbitrum and base expecting to farm the poly token and enjoy cheap cross chain transfers. but the controversy is the absolute centralization of the polymer sequencer and the massive technical bugs in the ibc packet relay logic. the foundation controls the sequencer with a multi sig and can theoretically censor or reorder transactions at will completely defeating the purpose of building a decentralized ibc hub. to make matters worse the packet relay contracts have multiple bugs causing thousands of cross chain transfers to get stuck in the escrow with no way to recover the funds without manual intervention from the core team. my deep dive on the evm ibc meta is that bringing cosmos interoperability to ethereum rollups is incredibly difficult and the retail users always take the risk when the infrastructure is still in beta. if you are using polymer for cross chain transfers you need to stick to small test amounts until the sequencer is fully decentralized and the relay contracts are audited. protect your capital and never bridge your entire stack through a centralized sequencer that can censor your transactions. the polymer tech is brilliant for unifying the evm and cosmos ecosystems but the retail bridge experience is a massive trust trap right now. #Polymer #IBC #Ethereum

avatar

📡 Hyperlane ISM configuration bugs and delays — August 30 📡 gm the hyperlane interchain security module bugs and the routing delays are completely frustrating the modular interoperability meta and retail bridge users are getting their funds stuck in limbo. hyperlane launched as the ultimate permissionless cross chain messaging protocol allowing any developer to deploy their own custom security modules and bridge assets between any evm chain without relying on a centralized validator set. the community rushed in to use the native warp routes and bridge tokens expecting to farm the hyper token and earn fees from the message routing. but the controversy is the absolute complexity of the ism configuration and the massive technical bugs in the default routing logic. when a user tries to bridge a token through a warp route the hyperlane relayers have to verify the custom security module which often fails due to misconfigured threshold signatures or outdated validator lists causing the funds to get stuck in the bridge contract. retail users who initiated transfers are completely unable to recover their funds without manually calling the process function and paying massive gas fees on the destination chain. my take on the permissionless messaging meta is that allowing anyone to deploy their own security modules introduces massive operational risk and the retail users always take the haircut when the configuration is wrong. if you are using hyperlane warp routes you need to verify the ism configuration and the validator set before you bridge any significant amount of capital. protect your funds and stick to established routes with battle tested security modules or use centralized bridges for time sensitive transfers. the hyperlane tech is brilliant for customizable interoperability but the retail ux is a massive minefield right now. #Hyperlane #CrossChain #Messaging

avatar

Fogo has temporarily halted its mainnet after an attacker gained access to 400 million $FOGO. These tokens are worth approximately $3 million, equivalent to over 10% of the circulating supply. The puzzling aspect is that 15 hours earlier, the project still claimed the blockchain was operating normally and unaffected. A Layer 1 that touts a block speed of 40 milliseconds ultimately had to trigger a full network shutdown to freeze the funds.

avatar

Cosmos Labs admitted to having incorrectly assessed the vulnerability behind the $5.7 million attack. The flaw was reported by a researcher in April, but the testing team concluded that active networks were not at risk and quietly patched it without issuing a warning. Subsequently, the attacker exploited this vulnerability to drain assets across six blockchains, with MANTRA suffering losses of approximately $3.6 million. A patch was released, but it did not specify the nature of the flaw and provided little help, as validators had only 20 hours to upgrade.