{"vulnerability": "GHSA-7G4W-CG88-2CQ2", "sightings": [{"uuid": "502b5154-ea88-44ad-a6ee-f557411357d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117179605144571410", "content": "This was posted yesterday regarding a critical vulnerability:\n\"We were unable to reproduce the vulnerability on 18-decimal networks and incorrectly concluded that it affected only non-18-decimal networks.\" \nCosmos EVM GHSA-7g4w-cg88-2cq2 Post-Mortem https://github.com/cosmos/security/blob/main/communications/cosmos_evm_GHSA-7g4w-cg88-2cq2_post_mortem.md\nMore:\nThe Hacker News: Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html @thehackernews #infosec #vulnerability", "creation_timestamp": "2026-08-29T15:54:38.057249Z"}, {"uuid": "75fdd7be-dc0f-4934-9361-0694da82418a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu7xrryqyf2v", "content": "\ud83e\udd16 Critical flaw in the Cosmos EVM module (GHSA-7g4w-cg88-2cq2) exploited in the wild: funds drained from 6 blockchains, Aug 20-25. Fix in v0.6.2/v0.7.2, upgrade is state-breaking.\n\nhttps://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "creation_timestamp": "2026-08-29T13:20:41.464032Z"}, {"uuid": "2474e26d-eeaf-42bd-a641-e78ee36fb616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu6ax42wfx2g", "content": "\ud83e\udd16 Critical balance-handling flaw in the Cosmos EVM module (GHSA-7g4w-cg88-2cq2) exploited in the wild: funds drained from six blockchains. Versions < 0.6.2 affected; no CVE/CVSS yet.\nhttps://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "creation_timestamp": "2026-08-28T20:59:24.621341Z"}, {"uuid": "edc5afe0-709b-484f-911d-c22c86b05426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "content": "Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.\n\nThe vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score.\n\nAffected versions are < 0.6.2 and >=", "creation_timestamp": "2026-08-28T22:00:41.389261Z"}, {"uuid": "4546ac5c-6c6a-42a6-b6d4-93b29804d0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7g4w-cg88-2cq2", "type": "seen", "source": "https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html", "content": "Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026.\n\nThe vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score.\n\nAffected versions are < 0.6.2 and >=", "creation_timestamp": "2026-08-29T01:00:36.093676Z"}, {"uuid": "721c206f-096d-4012-8f8e-e58c202ee0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7G4W-CG88-2CQ2", "type": "exploited", "source": "Telegram/CzREW4zYQrdpDU3f06_fKc9y00y9UGbjYDqP2BwY_P4brA", "content": "", "creation_timestamp": "2026-08-29T08:00:05.110364Z"}, {"uuid": "611a27d8-a18c-4a8d-8b3f-aca977510db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-7G4W-CG88-2CQ2", "type": "exploited", "source": "Telegram/CzREW4zYQrdpDU3f06_fKc9y00y9UGbjYDqP2BwY_P4brA", "content": "", "creation_timestamp": "2026-08-30T00:00:55.171037Z"}]}