Cosmos Labs has issued a warning regarding a critical vulnerability in the shared Cosmos EVM module, identified as GHSA-7g4w-cg88-2cq2, which was exploited to siphon funds from six different blockchains between August 20 and August 25, 2026. Notably, the exploit occurred despite Cosmos Labs being aware of the issue, highlighting a significant lapse in security oversight. The affected versions of the module are those below 0.6.2, with no CVE identifier provided, raising concerns about transparency and response protocols in blockchain security vulnerabilities.
For businesses operating on these blockchains, the implications are profound. The exploitation of this vulnerability not only results in immediate financial losses but also undermines trust in the security of blockchain technologies. Companies should prioritize upgrading to the latest version of the Cosmos EVM module to mitigate risks. This incident underscores the necessity for robust vulnerability management practices in the blockchain space, as it directly impacts the integrity of financial transactions and the broader ecosystem. Furthermore, it serves as a stark reminder of the evolving threat landscape in cybersecurity, particularly within decentralized platforms where traditional security frameworks may not apply effectively.
---
*Originally reported by [The Hacker News](https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html)*