6 chains attacked, losses of approximately $5.72 million; Cosmos Labs releases EVM module security incident report

Odaily News: Cosmos Labs has released an analysis report on the EVM module security incident. Between August 20 and August 25, attackers exploited a vulnerability in Cosmos EVM to steal funds from multiple Cosmos chains. After MANTRA first issued a notification, the Cosmos security team coordinated with approximately 40 chains to assess risks and deploy mitigation measures. A total of 6 networks were attacked, with approximately $2.87 million in assets sold on DEXs after being bridged, and another approximately $2.85 million in assets sold on CEXs. The CEX accounts used by the attackers have been frozen, and related investigations are ongoing. An additional 13 potentially vulnerable networks completed patches, halted chains, or took other protective measures in a timely manner, with no further losses reported. The vulnerability was first reported as early as April 25 through the bug bounty program.