Cosmos EVM accounting flaw exploited across six chains

A shared Cosmos EVM flaw was reportedly exploited across multiple chains, including MANTRA, TAC, and KiiChain, with total losses approaching $6 million. The issue sat in a common software layer, which meant one accounting mistake could affect many networks at once.

The underlying problem was unsafe balance handling in shared code. When accounting logic allows values to wrap or subtract without proper checks, attackers can create impossible states and move balances they should not control.

The main defense is rigorous balance-safety testing, especially around unsigned arithmetic and cross-module accounting. Shared infrastructure should also have rapid patch coordination, emergency halt procedures, and explicit invariants that prevent negative-balance or overflow states.

Projects built on reusable chain modules should assume a vulnerability in the base stack can spread widely. That makes coordinated disclosure, upgrade readiness, and continuous fuzzing essential for every network using the same code.