Cosmos Labs warned that a critical balance‑handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20‑25, 2026. The vulnerability, catalogued as GHSA‑7g4w‑cg88‑2cq2, is rated Critical but lacks a CVE identifier.
- A balance‑handling bug in Cosmos EVM was exploited.
- Funds were siphoned from six blockchains between Aug 20‑25, 2026.
- The flaw is listed as GHSA‑7g4w‑cg88‑2cq2, rated Critical, without a CVE.
Incident Overview
Cosmos Labs disclosed a severe balance‑handling vulnerability in its shared Cosmos EVM module, identified as GHSA‑7g4w‑cg88‑2cq2. Attackers leveraged this flaw to empty wallets on six distinct blockchains over a five‑day window, resulting in multi‑million‑dollar losses.
Affected Versions
The at‑risk releases include any version < 0.6.2 and >= 0.6.2, effectively covering the majority of active nodes. Cosmos Labs urged immediate patching, but many networks lagged, amplifying the damage.
Why This Matters
BozokMedia analysis shows that the shared EVM architecture, while fostering interoperability, also creates a single point of failure that can be weaponized across multiple ecosystems, amplifying systemic risk in the blockchain sector.
"Detecting and patching such foundational bugs swiftly is essential for the stability of the blockchain ecosystem," said blockchain security analyst Alisha Khan.
Historical Background
The Cosmos EVM was launched in 2022 to enable Ethereum‑compatible smart contracts on various zones. A minor security issue surfaced in 2023, but its impact was limited. This 2026 flaw is technically more severe because it affects the shared module used by all Cosmos‑based chains.
Frequently Asked Questions
Q1: Should all Cosmos‑based blockchains update immediately?
A: Yes, every node operator must apply the latest patch to prevent further losses.
Q2: Will users receive any compensation for the stolen funds?
A: No official compensation scheme has been announced; affected projects must devise their own remedies.
