BTC $80,330.98 -0.09%
ETH $2,325.96 +0.09%
BNB $743.03 -0.62%
XRP $1.29 -1.43%
SOL $100.67 +0.26%
TRX $0.3313 +0.04%
DOGE $0.0791 +0.73%
ADA $0.2019 +0.21%
BCH $279.43 -4.80%
LINK $11.65 +1.34%
HYPE $91.04 +14.43%
AAVE $133.21 +1.74%
SUI $0.9321 +1.57%
XLM $0.1707 +1.07%
ZEC $1,274.98 +0.30%
AAPL $350.31 +1.49%
AMZN $247.12 -2.62%
GOOGL $285.97 -11.95%
MSFT $525.90 -0.81%
META $624.83 +1.43%
NVDA $213.50 -2.30%
TSLA $405.19 +1.44%
SNDK $1,370.14 +0.51%
INTC $92.74 -1.06%
SPCX $143.63 -0.54%
MU $950.79 -2.15%
AMD $567.74 +0.67%
BTC $80,330.98 -0.09%
ETH $2,325.96 +0.09%
BNB $743.03 -0.62%
XRP $1.29 -1.43%
SOL $100.67 +0.26%
TRX $0.3313 +0.04%
DOGE $0.0791 +0.73%
ADA $0.2019 +0.21%
BCH $279.43 -4.80%
LINK $11.65 +1.34%
HYPE $91.04 +14.43%
AAVE $133.21 +1.74%
SUI $0.9321 +1.57%
XLM $0.1707 +1.07%
ZEC $1,274.98 +0.30%
AAPL $350.31 +1.49%
AMZN $247.12 -2.62%
GOOGL $285.97 -11.95%
MSFT $525.90 -0.81%
META $624.83 +1.43%
NVDA $213.50 -2.30%
TSLA $405.19 +1.44%
SNDK $1,370.14 +0.51%
INTC $92.74 -1.06%
SPCX $143.63 -0.54%
MU $950.79 -2.15%
AMD $567.74 +0.67%

osmo

All
Article
Flash

first_img Backbone Labs bOSMO contract vulnerability leads to support exhaustion, Osmosis announces compensation plan

The liquid staking token bOSMO issued by Backbone Labs nearly exhausted its contract support after a large redemption in the Osmosis community pool. A disclosure on the Osmosis forum on October 15 revealed that approximately 40,508 OSMO were designated for compensation to 1,037 accounts. The disclosure author Johnny Wyles stated that the staking contract has overpaid for each redemption since at least April 2026, settling at approximately 1.676 OSMO per bOSMO, while the declared exchange rate of the contract was about 1.117 OSMO.The vulnerability repeatedly counted the OSMO staked on Backbone's own validators, allowing redeemers to receive about 50% more assets, at the cost of diluting the support for remaining holders. The defect was exposed when preparing to liquidate the community pool position, and the passed governance proposal 1049 authorized the withdrawal of the Margined managed treasury position and the destruction of the reclaimed OSMO when it ceased managing liquidity operations. The pool's bOSMO treasury holds approximately 1.137 million bOSMO, accounting for about 97% of the total supply of the token; the redemption transaction executed on October 9 at 21:59 ET destroyed 776,000 bOSMO and began unbinding approximately 1.3 million OSMO.Compensation is based on the qualified balance at block 72,237,940, calculated at 1.1174 OSMO per bOSMO. bOSMO purchased after the snapshot is not included in the compensation, and underlying holders in the liquidity pool and other contracts are also included;

Cosmos Hub: 1.227 million ATOM has been recovered from the Neutron attack case, with funds temporarily stored at a 4/6 multi-signature address

Cosmos Labs disclosed that on September 22, Neutron encountered a governance attack that led to the theft of liquidity from protocols such as Astroport, with approximately 1.73 million ATOM subsequently transferred by the attacker to Cosmos Hub. The Cosmos Hub itself was not attacked, and user funds were not affected. To prevent the stolen ATOM from being transferred out, Hub validators temporarily paused the network for about 24.5 hours and resumed block production on September 23 based on the patched Gaia v28.3.0.Cosmos Labs stated that during the pause, 1.227 million ATOM remained in the attacker's Hub address. When the network was restored, these were transferred to a 4/6 multi-signature address composed of Nansen, Keplr, Enigma, Silknodes, Kiln, and Polkachu through a one-time change. Previously, about 500,000 ATOM had been exchanged for ETH via THORChain and could not be recovered; another 169,000 ATOM entered the attacker's address after the network was restored due to THORChain refunds and were sold after being transferred to Osmosis. The current multi-signature address holds approximately 1.227 million ATOM, which can only be returned after authorization from a Cosmos Hub governance proposal. The related funds will not be staked, lent, or traded. The Neutron team expects to submit a recovery plan and related governance proposals next week.

first_img Cosmos announced the launch of the Partner Network to assist financial institutions in tokenization

According to PR Newswire, Cosmos announced the launch of the Cosmos Partner Network, uniting multiple industry service providers to assist global financial institutions in advancing digital asset-related businesses through the Cosmos Tokenization Suite and digital ledger solutions.The suite offers capabilities such as 24/7 payment settlement and fund management for banks and credit unions, and supports scenarios like programmable custody, programmable trade finance, and agency commerce. Cosmos provides tokenization and ledger platforms, while partners offer integrated services such as KYC/KYB, custody, and compliance monitoring.Cosmos Co-CEO Maghnus Mareneck stated that financial institutions understand the potential of tokenization but struggle to transition from pilot projects to high-quality real customer experiences. This network brings together relevant professional institutions to reduce the complexity of individually connecting with vendors.The first batch of the network includes 17 participants, including Anseta, Balance, BCW Group, BitGo, Blockchain.com, Blockdaemon, Coinbax, DFNS, Galaxy Digital, Hypernative, InfStones, OpenZeppelin, Peersyst Technology, Silence Laboratories, Ubyx, Utila, and Zeeve.Partners will have access to connection opportunities across Cosmos public and private networks and can participate in use cases such as tokenized deposits that Cosmos is promoting. Cosmos plans to continue expanding the network.

first_img Cosmos Labs admits to misjudging a vulnerability, resulting in an attack on six chains with a loss of 5.7 million dollars

Cosmos Labs released a technical report, admitting that it previously misjudged an integer underflow vulnerability in the Cosmos EVM, which led to attacks on six blockchain networks between August 20 and 25, resulting in a total theft of approximately $5.7 million in tokens. The attacker exploited the vulnerability to underflow account balances to the maximum value of 2^256-1, then performed a reverse operation to transfer the inflated balance out, thereby stealing tokens from the target accounts without creating tokens out of thin air.The report shows that researchers submitted the defect through a bug bounty program on April 25, but testers were unable to reproduce it on the existing Cosmos chain configuration, so Cosmos Labs silently patched it in May. Independent researchers confirmed in early August that the vulnerability affected all Cosmos EVM chains, and Cosmos Labs released a patch on August 19, but the first attack occurred about 20 hours later.In terms of specific losses, MANTRA lost 720.9 million tokens (approximately $3.6 million), TAC lost nearly 3 billion TAC, and KiiChain lost about 148 million KII. Both MANTRA and KiiChain criticized Cosmos Labs for not notifying the affected chains in advance and suggesting a shutdown, with KiiChain stating that the patch would take several days to deploy while a shutdown would only take a few minutes. Cosmos Labs stated that it has coordinated responses with 40 chains and assisted 13 chains in completing repairs or shutdowns before being attacked.
app_icon
ChainCatcher Building the Web3 world with innovations.