Cosmos Labs Urges EVM Chains to Halt as KiiChain and TAC Attacks Raise Security Fears

Cosmos Labs has urged affected networks in contact with its team to halt operations amid an ongoing security incident involving the EVM module.

Statements issued by KiiChain, TAC, and MANTRA have all pointed to flaws within the Cosmos EVM infrastructure when describing the attacks they faced in recent days.  Cosmos Labs, however, has yet to establish publicly whether the incidents stemmed from one common flaw or clarify which networks were specifically instructed to suspend operations.

EVM Security Crisis Escalates

Cosmos Labs said it will publish an incident report once the situation has been resolved. Meanwhile, KiiChain said an attacker drained 148,326,583.15 KII from wallets on August 22, repeating the same technique 18 times against different targets. The chain detected the activity internally and halted at block 9,355,723, thereby stopping further theft and freezing funds that remained on the network. According to KiiChain, the root cause had been identified, reproduced and fixed.

It said that the vulnerability was in the shared Cosmos EVM module, rather than KiiChain-specific code. The chain said three upstream defects combined to enable the attack, including an underflow in the staking precompile when it writes a post-delegation balance back to the EVM, along with two other undisclosed bugs.

… Continue reading the full article at the original source below.