POPA ReconOne Cosmos EVM Bug Has Now Hit Four Chains
One Cosmos EVM Bug Has Now Hit Four Chains Cosmos Labs confirmed an active security incident in its Cosmos EVM module and advised connected chains to have validators halt while its engineers work through a fix. The weakness sits in the ICS20 precompile: state changes made during nested EVM calls were not carried back into the outer transaction, letting an attacker spend the same balance more than once. It drained the Saga network of about $7 million back in January, and a permanent fix shipped publicly as part of v0.6.0. Not every chain upgraded in time. This month the same class of bug hit…
The excerpt is quoted from a public Telegram channel, which owns its text.