Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

Cosmos Labs has disclosed that a critical flaw in the Cosmos EVM module was exploited, resulting in the drainage of funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is considered Critical by Cosmos Labs. This issue affects the balance-handling functionality of the shared module. Cosmos Labs was aware that every blockchain running the Cosmos EVM was vulnerable to this flaw. The vulnerability was published without additional classification details such as a CVE identifier, weakness classification, or CVSS score.