Entity background
The Ethereum Virtual Machine is the execution environment that runs smart-contract code consistently across Ethereum nodes and meters computation with gas. Many other chains implement EVM compatibility, so EVM is a technology topic rather than one company; implementation flaws, upgrades, or shared modules can affect multiple networks.
SourceOfficial site
Current focus
xiyu.news has tracked 3 related reports since 2026-08-26. The latest focus is “Vulnerability Reported in Six Cosmos EVM Chains”. 1 continuing event timelines connect the coverage over time.
Recent developments
3 entries- #01
Vulnerability Reported in Six Cosmos EVM Chains
CryptoTicker has reported a security vulnerability affecting six Cosmos EVM chains. The report highlights a protocol-wide security risk for these EVM-compatible Cosmos networks. This matters because EVM-compatible chains in the Cosmos ecosystem host significant DeFi activity, and a shared vulnerability could expose multiple networks simultaneously. It underscores the systemic risk that arises when multiple chains rely on common infrastructure such as the Cosmos EVM module. The vulnerability affects chains that use the Cosmos EVM module for Ethereum compatibility, meaning the attack surface is shared across those networks. No exploit has been publicly reported so far.
- #02
Cosmos misjudged critical EVM bug for 4 months before $6M cross-chain exploit
On August 28, Cosmos Labs disclosed that a misjudged EVM vulnerability was exploited across six networks, including MANTRA, TAC, and KiiChain, causing nearly $6 million in losses. The flaw was first reported on April 25 but was deemed low-risk due to decimal assumptions; a silent patch was merged on May 15, and the real exploit began on August 20 after the assessment was revised. This incident exposes a months-long triage failure in a shared software layer — Cosmos EVM — that provides Ethereum compatibility to Cosmos SDK chains. With roughly 40 networks potentially affected and 11 previously unknown deployments discovered, it raises urgent questions about security disclosure and patch distribution across the broader Cosmos ecosystem. The exploit combined two accounting failures: an unsigned-integer underflow created an abnormally large balance, which was then used to overflow another account and extract its legitimate balance without increasing total token supply. Cosmos Labs contacted 40 networks, with 13 potentially exposed chains patching, halting, or applying mitigations; MANTRA suffered the largest disclosed hit, with about 720.9 million tokens moved from two unauthorized addresses.
- #03
Cosmos Labs Urges EVM Chains to Halt as Shared Bug Drains Three Networks
Cosmos Labs recommended that EVM chains built on its shared stack halt operations after a vulnerability drained three networks. KiiChain, one of the affected chains, reported losing 148 million tokens, and the halt advisory came six days after a patch shipped without a public security advisory. A shared vulnerability in the Cosmos EVM stack means many chains may be exposed at once, not just a single network. This incident can undermine trust in the ecosystem and highlights the critical need for coordinated security disclosure across interconnected chains. KiiChain stated that two of the three underlying defects remain unfixed upstream. The delay between the patch release and the public advisory may have left other chains unaware of the critical risk.