A Critical Flaw in Cosmos EVM Exposes Thousands of Blockchain Networks
A disturbing revelation has emerged about a long-known vulnerability in the Cosmos EVM (Ethereum Virtual Machine), which has been exploited by malicious actors despite warnings from its developers. The issue, first identified several months ago, affects not just one but thousands of blockchain networks that use the Cosmos EVM, putting sensitive data and funds at risk.
At the center of this controversy is Cosmos Labs, the development team behind the Cosmos EVM. Despite knowing about the flaw in May 2026, they chose not to disclose it publicly until after its exploitation was confirmed. The vulnerability allows hackers to cross-domain privilege escalation, essentially creating a backdoor that can be exploited to gain unauthorized access to sensitive data and funds on affected blockchain networks.
The Cosmos EVM is a popular framework used by many blockchain developers to create and deploy decentralized applications (dApps). It’s estimated that over 10,000 blockchain networks rely on the Cosmos EVM, including some high-profile projects in the DeFi (Decentralized Finance) space. The exploitation of this flaw has already led to several reported incidents, with hackers making off with significant amounts of cryptocurrency and sensitive user data.
The mechanics of the vulnerability are complex but can be broken down simply: when a blockchain network uses the Cosmos EVM, it creates a privileged account that can access sensitive areas of the network. The flaw allows attackers to manipulate this privileged account, effectively giving them free rein to move around the network and exploit its vulnerabilities. This cross-domain privilege escalation is made possible by the way the Cosmos EVM handles user permissions and access controls.
The situation raises serious questions about the responsibility of software developers when it comes to disclosing security flaws. By choosing not to publicly disclose the vulnerability, Cosmos Labs has put thousands of blockchain networks at risk, potentially exposing sensitive data and funds to malicious actors. This incident serves as a stark reminder that cybersecurity is a shared responsibility between developers, users, and regulators.
As the cybersecurity landscape continues to evolve, it’s essential for developers to prioritize transparency and security when building and deploying software. Users, too, must remain vigilant and take proactive steps to protect their data and funds on blockchain networks. The exploitation of the Cosmos EVM flaw highlights the importance of staying informed about potential vulnerabilities and taking immediate action to mitigate them.
To stay safe, it’s essential for users to keep their blockchain software up-to-date, monitor network activity closely, and be cautious when interacting with unfamiliar or unverified applications. By being proactive and aware of potential security risks, you can protect your data and funds on the blockchain.
Source: The Hacker News — 2026-08-28