negativeSYS.SOURCE: The Hacker News• 2026-08-29T02:08:47+05:30

Critical Cosmos EVM Vulnerability Exploited Despite Known Risk

#blockchain #vulnerability #cosmos #smart contracts #security

A critical balance-handling flaw in the Cosmos EVM module was exploited to drain funds from six blockchains despite Cosmos Labs being aware of the vulnerability since April 2026. The flaw allowed attackers to manipulate vesting account balances through unchecked subtractions, leading to supply overflow and chain halts, with delayed patching and public disclosure issues.

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.

The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score.

Affected versions are < 0.6.2 and >=

Read original article

*** END OF TRANSMISSION ***

> CHERENKOV RADIATION: UNDERSTANDING SUPERLUMINAL PARTICLE EMISSION > NEIJUAN: A SOCIOLOGICAL CONCEPT OF INTENSIFIED COMPETITION WITHOUT COLLECTIVE BENEFIT > US DIESEL PRICES SURGE TO RECORD $6 PER GALLON AMID IRAN SUPPLY DISRUPTION > EXPLOITATION OF JFROG ARTIFACTORY VULNERABILITIES ENABLES ADMIN PRIVILEGE ESCALATION AND BACKDOOR DEPLOYMENT > CHINA-LINKED UNC3569 EXPLOITS SOGOU INPUT METHOD VULNERABILITY TO DEPLOY GRAYRABBIT BACKDOOR > PAPERCUT ADDRESSES ACTIVELY EXPLOITED VULNERABILITIES WITH NEW SECURITY RELEASES > CRITICAL ANALYSIS OF GPT-6 ASTRA'S CODING CAPABILITIES > CISCO FMC VULNERABILITIES EXPLOITED FOR CREDENTIAL THEFT AND QILIN RANSOMWARE DEPLOYMENT > OPENAI'S GPT-LIVE-1 API ENHANCES REAL-TIME LANGUAGE PROCESSING CAPABILITIES > GOOGLE UNVEILS GEMINI APP FOR WINDOWS PLATFORM> CHERENKOV RADIATION: UNDERSTANDING SUPERLUMINAL PARTICLE EMISSION > NEIJUAN: A SOCIOLOGICAL CONCEPT OF INTENSIFIED COMPETITION WITHOUT COLLECTIVE BENEFIT > US DIESEL PRICES SURGE TO RECORD $6 PER GALLON AMID IRAN SUPPLY DISRUPTION > EXPLOITATION OF JFROG ARTIFACTORY VULNERABILITIES ENABLES ADMIN PRIVILEGE ESCALATION AND BACKDOOR DEPLOYMENT > CHINA-LINKED UNC3569 EXPLOITS SOGOU INPUT METHOD VULNERABILITY TO DEPLOY GRAYRABBIT BACKDOOR > PAPERCUT ADDRESSES ACTIVELY EXPLOITED VULNERABILITIES WITH NEW SECURITY RELEASES > CRITICAL ANALYSIS OF GPT-6 ASTRA'S CODING CAPABILITIES > CISCO FMC VULNERABILITIES EXPLOITED FOR CREDENTIAL THEFT AND QILIN RANSOMWARE DEPLOYMENT > OPENAI'S GPT-LIVE-1 API ENHANCES REAL-TIME LANGUAGE PROCESSING CAPABILITIES > GOOGLE UNVEILS GEMINI APP FOR WINDOWS PLATFORM