Cosmos Labs Urges EVM Chain Halts After KiiChain 148M KII Exploit

102 views
Blockchain Security, Crypto Exploit

Cosmos Labs has urged networks using its EVM module to ask validators to halt their chains as engineers respond to vulnerabilities affecting the software that brings Ethereum-compatible execution to Cosmos SDK networks.

The emergency halt request came after several Cosmos EVM networks took defensive action and KiiChain suffered the largest confirmed loss. Cosmos Labs is coordinating with affected teams and plans to release a full incident report after the remaining security work is completed.

KiiChain Attack Moved 148 Million KII

KiiChain’s August 22 exploit moved 148.33 million KII through 18 attack rounds before validators stopped the network at block 9,355,723. The attack abused vulnerabilities in shared Cosmos EVM components rather than KiiChain-specific application code, expanding the security issue beyond a single network.

More than half of the tokens remain recoverable. About 80.73 million KII, or 54.4% of the stolen amount, never left KiiChain and remain frozen at attacker-controlled addresses. Another 67.6 million KII crossed through Hyperlane to BNB Smart Chain, where 64.6 million were sold for BUSD and USDT and 3 million reached KuCoin. A freeze request has been submitted for the exchange deposit.

The earlier KiiChain halt initially left the loss amount unresolved while the team traced the BSC transfers. Hyperlane served as the route out of KiiChain after the EVM exploit and has not been identified as the vulnerable component.

KII has recovered sharply from the selloff that accompanied the attack. The token was trading near $0.061 early Tuesday after reaching an all-time low of $0.01131 on August 22, a rebound of more than 400%.

Warden Ships Patch as MANTRA Also Halts

Warden Protocol released version 1.0.2 on August 23, upgrading Cosmos EVM to v0.6.2 and blocking the creation of vesting accounts through the affected path. The release followed Cosmos EVM v0.6.2 and v0.7.2, both published August 19 with security fixes requiring coordinated, state-breaking upgrades.

MANTRA had already halted its mainnet on August 21 after isolating an exploit to an upstream software dependency. Validators, public endpoints and MANTRA-operated cross-chain infrastructure were stopped while patched software was prepared.

Cosmos EVM embeds a full Ethereum Virtual Machine inside Cosmos SDK chains, allowing Solidity contracts to interact directly with native staking, governance and IBC modules through precompiles. KiiChain’s incident analysis identified three defects involved in the exploit path, while only the underflow component had been publicly patched upstream when its report was released.

Cosmos coin symbol
Atom
Cosmos
$1,51
price
red chart
decrease symbol4.48849%
price change
TRADE NOW

KiiChain remains halted while its patched upgrade is prepared. The restart plan includes recovering the 80.73 million KII still held onchain and adding withdrawal limits to cross-chain routes before normal operations resume.

Previous

Bitcoin Eyes $80K as Ethereum Hits $2,500 and Altcoins Extend Rally

Next

XRP Active Addresses Surge 655% as Price Jumps 53%, Putting $2 Back in Play

Written by

1344 posts

Bogdan is a genuine outside-the-box thinker. His philosophy is never to settle and always evolve. Since the very first moment, he heard of Bitcoin, he knew it would revolutionize the world.

VIEW AUTHOR

Publish your own article

Guest post article. Guaranteed publishing with just a few clicks

START PUBLISHING ADVERTISE WITH US

Browse categories

Explore trending topics in the crypto community right now.

Bitcoin

Crypto Funds Draw $1.3B for Sixth Straight Week as IBIT Leads Six-Week Run

Crypto investment funds attracted another $1.3 billion last week, extending their run of positive weekly flows to six consecutive weeks and lifting cumulative inflows across the period to roughly $6.8 billion. The latest intake followed approximately $3.3 billion in the previous week and pushed the four-week average to about $1.5 billion per week, its strongest level since November 2025. The sequence marks a sharp reversal from the heavy redemptions that pressured digital-asset products earlier this year. BlackRock’s iShares Bitcoin Trust...

Osmosis Pauses Alloyed BTC After Nomic Double-Spend Exploit

Osmosis has suspended deposits, withdrawals, minting and redemptions for Alloyed BTC after a vulnerability on Nomic allowed an attacker to double-spend nBTC and send unbacked vouchers into Osmosis. The Nomic security failure affected 39.84 nBTC held inside Alloyed BTC, representing roughly 36% of the asset’s backing. Osmosis and the Inter-Blockchain Communication protocol were not compromised, with the vulnerability isolated to Nomic’s custom forwarding mechanism. Emergency Upgrade Freezes 22.65 BTC Osmosis’ management subDAO halted Nomic and Alloyed BTC inflows and outflows...

Iran Turns to Bitcoin and USDT for Trade as U.S. Sanctions Tighten

Iranian businesses are increasingly using Bitcoin and Tether’s USDT to settle cross-border trade as the country loosens foreign-exchange controls and seeks alternative payment routes outside the global banking system. The Central Bank of Iran has quietly allowed exporters to receive cryptocurrency payments and settle transactions through domestic crypto exchanges, according to Iranian businesses, regime insiders and industry participants interviewed by the Financial Times. The central bank has not publicly formalized the change and declined to comment on the policy. Exporters...

Mexican Musician Jonathan Meléndez Killed in Suspected Bitcoin Cold-Wallet Robbery

Mexican musician Jonathan Meléndez, his pregnant wife, their three-year-old daughter and a household worker were killed in an alleged robbery targeting a cold wallet that the attackers believed contained millions of dollars in Bitcoin. Estado de México prosecutors arrested Diego Sebastián “N” and Gerardo “N” over the September 1 killings in Atizapán de Zaragoza. Meléndez’s six-year-old son survived the attack, while the family’s dog was also killed. Suspects Allegedly Searched for Bitcoin Cold Wallet Investigators allege that Diego Sebastián had...

MORE ARTICLES

Ethereum

Ledger Patches Ethereum Signing Flaw Before Researchers Disclose It

Ledger has patched a vulnerability in its Ethereum hardware-wallet app that could allow a malicious dApp to replace a transaction during the approval process while the device continued showing users the transaction they originally reviewed. Security firm TestMachine disclosed the signature-substitution flaw on August 21 after reproducing it on Ledger hardware. Ledger had already shipped Ethereum app version 1.22.2 on August 12, with its release history listing security fixes for the update. Malicious dApp Could Change the Transaction Before Signing...

Jesse Pollak Pushes Back On Coinbase ETH Selling Criticism, Points To 150K ETH Treasury

Base creator Jesse Pollak has pushed back against criticism that Coinbase is selling ETH while benefiting from Ethereum, pointing to the exchange’s roughly 150,000 ETH corporate position and years of investment across the network. Pollak argued that Coinbase has held about 150,000 ETH through multiple market cycles, while describing the company as the largest ETH holder outside dedicated digital asset treasury companies by a wide margin. Coinbase’s latest regulatory filing backs up the scale of that position. The company held...

Tornado Cash Phishing Frontend Drains 1,010 ETH From User

A crypto user lost 1,010 ETH after following an old Tornado Cash bookmark into a phishing frontend that captured the private withdrawal credentials needed to access the deposited funds. The victim deposited the ETH into legitimate Tornado Cash contracts, but the malicious interface obtained the private note generated during the process. The attacker then used those credentials to withdraw the assets within roughly 12 hours without compromising the underlying Tornado Cash smart contracts. Phishing Frontend Targeted Private Withdrawal Notes Tornado...

Ethereum New Address Growth Jumps 75% As Network Activity Accelerates

Ethereum’s network-growth metric has accelerated sharply in August, with new daily ETH addresses climbing from 121,210 on August 8 to 212,560 on August 16. The increase represents roughly 75.4% growth in eight days and adds another signal that activity is returning to the network. New-address creation measures the number of addresses appearing onchain for the first time rather than the number of unique people using Ethereum. A single user or automated system can control multiple addresses, so the metric is...

MORE ARTICLES

Trading

5 Best Crypto APIs for Trading Bots in 2026

A crypto trading bot is a chain of dependencies. It reads a position, prices it, decides, places an order, and confirms settlement. Every one of those steps is an API call, and a failure at any single step stops the strategy. The provider choice shapes what a bot can actually do more than the strategy logic does. The common mistake is searching for one API that covers everything. No such API exists in 2026. Market data providers do not route...

Best Prediction Markets Alternatives: Outpoll, Limitless, Myriad, Manifold

Polymarket and Kalshi helped turn prediction markets into a mainstream trading category, but neither platform fits every trader. Access varies by country, market selection can lean heavily toward certain topics, and the tools available for entering, managing, and automating positions differ sharply across platforms. The strongest alternatives are not identical copies. Some emerging prediction markets platforms focus on professional order controls, some concentrate on fast crypto and financial markets, and others use onchain infrastructure or play-money forecasting. Users unfamiliar with...

How to Get a Funded Crypto Trading Account in 2026 Step by Step

A funded crypto trading account gives a trader access to more notional capital after they prove they can follow a firm’s risk rules. The usual route starts with a paid crypto prop firm challenge that requires a profit target without breaching daily or overall loss limits. Passing is not only about making money. Drawdown control, minimum trading days and rule compliance determine whether the account survives. The evaluation fee can be lost, and crypto prop firms use different account models,...

How To Trade Tokenized Stock Perps: Leverage, Funding And Risks

Tokenized stock perps allow traders to take long or short exposure to companies, ETFs and equity indexes through crypto-native derivatives markets. Positions can use stablecoin collateral, remain open without an expiry date and continue trading when the main stock exchange is closed. The trader receives price exposure, not ownership of the referenced shares. The interface often looks identical to a crypto perpetual futures market. The risk does not. A stock-linked contract can remain active overnight, through weekends and during holidays...

MORE ARTICLES

Tech

Swiss Bitcoin Pay Takes Servers Offline After Suspected Internal Systems Breach

Swiss Bitcoin Pay has temporarily shut down its servers after a suspected unauthorized actor gained access to its internal systems, potentially exposing customer contact, banking and transaction information. The Bitcoin payments provider disclosed the security issue on September 14 and said user funds remain safe while it investigates the access and secures its infrastructure. The company has not announced when its services will return. Emails, Bitcoin Addresses and IBANs May Be Exposed The potentially accessed information includes customer email addresses,...

Nasdaq Invests $100M in Kraken Parent Payward at $21B Valuation

Nasdaq is investing $100 million in Payward, the parent company of Kraken, in a transaction valuing the private financial infrastructure company at $21 billion. The investment is being made through Nasdaq's venture arm and deepens a partnership already centered on moving regulated equities onto blockchain-based settlement infrastructure. The $21 billion valuation places Payward above the $20 billion equity value used in several transactions earlier this year and comes as Kraken continues preparations for a potential public listing. The exchange confidentially...

Circle Agrees to Buy Tazapay for $400M to Expand Global USDC Payments

Circle has agreed to acquire Singapore-based payments infrastructure company Tazapay for $400 million, bringing a business processing more than $25 billion in annualized payments into the USDC issuer’s global settlement network. The $400 million transaction will be paid in Circle Class A common stock, with the final share count based on Circle’s volume-weighted average closing price during the 20 trading days preceding completion. Adjustments will account for Tazapay debt, transaction expenses and cash. Tazapay Brings $25B in Payment Volume Tazapay...

Orionx Shuts Down After $7M Crypto Custody Shortfall

Chilean cryptocurrency exchange Orionx has begun permanently closing its operations after a forensic audit identified more than $7 million in custodial assets that had moved to wallets outside the company’s control. Withdrawals are temporarily suspended while Orionx reconciles customer balances and implements a five-stage closure and asset-restitution process. Full repayment is not guaranteed, with available assets expected to be distributed under equal and proportional treatment rather than allowing earlier withdrawals to receive priority. Bitcoin Accounts for Most of the Confirmed...

MORE ARTICLES