cosmos

Cosmos Labs released a technical report, admitting that it previously misjudged an integer underflow vulnerability in the Cosmos EVM, which led to attacks on six blockchain networks between August 20 and 25, resulting in a total theft of approximately $5.7 million in tokens. The attacker exploited the vulnerability to underflow account balances to the maximum value of 2^256-1, then performed a reverse operation to transfer the inflated balance out, thereby stealing tokens from the target accounts without creating tokens out of thin air.The report shows that researchers submitted the defect through a bug bounty program on April 25, but testers were unable to reproduce it on the existing Cosmos chain configuration, so Cosmos Labs silently patched it in May. Independent researchers confirmed in early August that the vulnerability affected all Cosmos EVM chains, and Cosmos Labs released a patch on August 19, but the first attack occurred about 20 hours later.In terms of specific losses, MANTRA lost 720.9 million tokens (approximately $3.6 million), TAC lost nearly 3 billion TAC, and KiiChain lost about 148 million KII. Both MANTRA and KiiChain criticized Cosmos Labs for not notifying the affected chains in advance and suggesting a shutdown, with KiiChain stating that the patch would take several days to deploy while a shutdown would only take a few minutes. Cosmos Labs stated that it has coordinated responses with 40 chains and assisted 13 chains in completing repairs or shutdowns before being attacked.

The Interchain Foundation stated that it is committed to supporting the development of the Cosmos ecosystem and recognizes the impact of recent Cosmos EVM events on teams that rely on Cosmos technology for deployment.To this end, the ICF is establishing a discretionary funding program to support affected chains collaborating on remediation efforts. As part of the same program, the foundation will invest resources alongside the community to further enhance security practices, infrastructure, and incident response capabilities across the ecosystem.The foundation will continue to invest in the resilience and security of Cosmos, with more details on the new funding program to be announced in the coming days.

Cosmos Labs announced that an ongoing security incident has affected users of the Cosmos EVM module. The security and engineering team at Cosmos Labs is actively responding to the incident and has advised validators on the Cosmos EVM chain in contact with them to suspend the operation of their chain.Cosmos Labs appreciates the swift response from all teams using Cosmos EVM and stated that an incident report will be released after the situation is resolved. If relevant teams are using Cosmos EVM and have questions, they can contact security@cosmoslabs.io.

TAC posted on platform X that an attacker exploited a vulnerability in the Cosmos EVM precompiled layer to transfer 2,985,651,403 TAC from a single account on the TAC network.The project team subsequently paused the network at block height 24,671,475 to prevent the attack from continuing.

According to CryptoSlate, after the approval of proposal 365, the privacy public chain Secret Network based on Cosmos upgraded to v1.26.0 on August 21, minting approximately 1.079 billion SCRT in a one-time issuance to maintain network operations before SCRT Labs stops support on September 1. After the upgrade, the total supply increased to approximately 1.443 billion, with the absolute balance of original holders remaining unchanged, but their total proportion decreasing to about one-quarter, resulting in a dilution of approximately 75%.The distribution of the new issuance includes: 299 million for the foundation and core development program each, 178 million for the ecological fund, 72 million for advisors, research and development, and validators each, 43 million for builders and relayers, and 44 million for remedial purposes. The v1.26 economic model allows approximately 308.4 million SCRT to be circulated on the first day and sets a continuous inflation rate of 5%. The community previously rejected SCRT Labs' proposal 360 regarding the migration to Arbitrum snapshots.SCRT Labs has indicated that regardless of the voting results, it will end development and related support for this Cosmos-based L1 on September 1. The chain itself has no plans to halt, and subsequent development, infrastructure, and validator participation will need to be undertaken by the community. This new issuance aims to provide resources and incentives for continued operations.

According to TAC monitoring, TAC stated that it is investigating a vulnerability attack incident targeting its EVM side based on Cosmos, which only affects the TAC token supply.The team is collaborating with TAC validators to temporarily suspend blockchain operations and will provide timely updates on the investigation results and chain recovery plans. Users are advised to obtain the latest news only through official channels.

Cosmos ecosystem wallet Cosmostation announced that it will officially cease wallet services. Starting from September 1, 2026, the iOS, Android, and Chrome extension versions will only retain the "Export Mnemonic" and "Export Private Key" functions, while other features will gradually be taken offline.Since this wallet is a non-custodial wallet, user assets are still stored on their respective blockchains. Holding the mnemonic or private key allows users to import the wallet into other compatible wallets for continued use. The official strongly recommends that users complete a secure backup of their private keys or mnemonics before September 1.

According to The Block, the core development team of the Cosmos ecosystem, Cosmos Labs, announced the acquisition of the Cosmos block explorer Mintscan and the establishment of a new subsidiary, Cosmos Labs Korea, in Seoul, South Korea, to coordinate the construction of several key infrastructures in the Cosmos ecosystem.According to Barry Plunkett, Co-CEO of Cosmos Labs, negotiations for the deal began in October 2025, initiated by the co-founder of the South Korean crypto company Stamper (the legal entity of Cosmostation). The parties did not disclose the transaction amount, financing method, or whether it involved Cosmos Hub tokens.

The Cosmos ecosystem cross-chain bridge Gravity Bridge is suspected to have been attacked due to the leakage of its signing key, resulting in approximately $5.4 million in assets being stolen. The official team has confirmed that they have encountered a security incident and have urgently suspended bridge services to conduct an investigation, while also requesting validators to suspend the operation of validation nodes and coordinators. It is reported that its contract key may have been compromised.

The Cosmos ecosystem chain Evmos will stop operating at block height 37,318,000 according to the "Evmos Shutdown" governance proposal. Currently, the Evmos block explorer, official website, and other services are inaccessible.

Market news: Security personnel disclosed a critical vulnerability in Cosmos CometBFT 0-day, which may cause block synchronization phase stagnation affecting over $8 billion in assets.

The Cosmos ecosystem wallet application Leap Wallet will cease operations on May 28, and users need to complete the migration as soon as possible. The discontinued products also include Compass Wallet (extension, iOS, Android), Leap WebApp, Swapfast, Leap Cosmos Hub validator nodes, and Leap Cosmos Snaps.

The Cosmos ecosystem project Neutron announced that NTRN redemption is now live, allowing holders to permanently burn their NTRN in exchange for a proportionate share of the USDC pool.The NTRN deposit window is from April 1 to April 30, with USDC redemption applications opening on May 1 and closing on June 30. The NTRN held by the foundation (estimated at about 32.4 million) will not participate in the redemption and will be burned.Previously, the Cosmos ecosystem project Neutron announced it would transition to a long-term maintenance mode. The DEX and Supervault will be suspended and enter withdrawal-only mode by April 17 at the latest, with Hadron Labs responsible for network maintenance until June 30, 2026, after which a manual withdrawal guide will be released. Governance will transition from a custom system to a standard Cosmos staking model, inflation will be dynamically adjusted, and the validator set will be reduced.

According to official news, the Cosmos ecosystem lending protocol Mars Protocol has announced that it has completed all withdrawal processes according to governance proposal MRC-165: all liquidation LTVs have been adjusted to 0, and all remaining loan positions have been liquidated. Funds in users' credit accounts and Mars v1 have been directly returned to their wallets.The project team stated that the funds held by Amber will be notified separately through Amber's official channels in the coming days. The Mars official Discord and Telegram will be closed soon, and no further support or updates will be provided. The Mars team stated that this operation marks the formal and orderly end of the protocol.

The Cosmos cross-chain smart contract platform Neutron tweeted that its network will shift to a long-term maintenance mode, prioritizing the protection of user, builder, and stakeholder asset security. Core changes include: Supervaults will prohibit new deposits starting March 16, DEX and Supervaults will be completely suspended by April 17 (only withdrawal channels will remain until June 30); dNTRN holders can exchange for NTRN through the Drop website or Neutron app starting March 23; wstETH holders must cross-chain back to Ethereum by June 30; the NTRN redemption mechanism will be announced later, and the remaining assets after the foundation's liquidation are intended to be returned to the DAO proportionally.Governance, staking, and validator systems will abandon the Neutron custom model and switch to the standard Cosmos model; token inflation will be dynamically adjusted, and the foundation and DAO plan to destroy a large amount of NTRN to compress supply; Hadron Labs will maintain the network until June 30, after which it will transition to a low-maintenance community support mode; Fireblocks support will end by the end of April. The team stated that despite significant innovations over the past four years, the recent market environment has been poor, and the lack of a viable long-term strategy led to this decision.

According to BBX data, yesterday global listed companies exhibited "high frequency and standardized" characteristics in expanding their crypto treasuries:Semler Scientific (NASDAQ: $SMLR): Yesterday, it used the ATM financing tool to acquire another 580 BTC, costing approximately $41.2 million. Its total holdings have now surpassed 1,500 BTC.Cosmos Health (NASDAQ: $COSM): The board passed a resolution to issue $20 million in special bonds for the purchase of BTC and ETH, accelerating the digitalization of its treasury through debt leverage.Solidion Technology (NASDAQ: $STI): Officially established financial guidelines to convert 60% of its redundant cash on the balance sheet into Bitcoin in batches, as a core strategy to hedge against the decline in fiat purchasing power.SOS Ltd (NYSE: $SOS): Confirmed that it has executed the first $15 million subscription of its $50 million Bitcoin and Ethereum investment plan, aiming to complete the entire allocation in the second quarter.Bit Digital (NASDAQ: $BTBT): Disclosed that it increased its holdings by 45 BTC yesterday through AI business profits, adhering to the endogenous growth logic of "business profits as reserves."

According to GlobeNewswire, Nasdaq-listed company Cosmos Health announced that it has invested $600,000 to increase its holdings in Bitcoin. As of now, its total investment in digital asset reserves has reached $3.1 million, and the company also holds Ethereum in addition to Bitcoin.

Cosmos Labs posted on the X platform, stating that a vulnerability has recently been discovered, affecting certain blockchains built on the Cosmos EVM Stack. This vulnerability has impacted the Layer 1 blockchain Saga in the production environment.Cosmos Labs stated that its team has been investigating the issue in collaboration with Saga and ecosystem partners, and has coordinated the implementation of mitigation measures. A security patch has now been released to the affected blockchains.

According to Coinmarketcap data, the top 100 cryptocurrencies by market capitalization performed as follows, with the top five gainers: MemeCore (M) up 18.84%, current price $1.54; Nexo (NEXO) up 6.36%, current price $0.889; Pi (PI) up 4.94%, current price $0.1778; Cosmos (ATOM) up 4.37%, current price $2.27; Jupiter (JUP) up 4.14%, current price $0.1631.The top five losers: Pippin (PIPPIN) down 25.76%, current price $0.5411; MYX Finance (MYX) down 23.81%, current price $1.47; Lighter (LIT) down 2.31%, current price $1.56; LayerZero (ZRO) down 2.22%, current price $1.58; Tether Gold (XAUt) down 2.21%, current price $4,844.44.