Cosmos Labs披露漏洞流程遭质疑，四条链受影响
Cosmos Labs under fire over disclosure of bug affecting four blockchains
加密安全事件，涉及多链漏洞与披露流程争议，对Cosmos生态及受影响链用户有直接影响，建议关注后续修复进展与资金安全。
Cosmos Labs has faced backlash from across the crypto security community over its disclosure of a bug in its Cosmos EVM module which has led to issues on four blockchains.
Cosmos Labs因其在Cosmos EVM模块中披露的一个漏洞而遭到加密安全社区的强烈反对，该漏洞已导致四条区块链出现问题。
Four networks using the module, MANTRA, TAC, KiiChain and Nesa, all appear to be affected by the bug, which was quietly patched last week.
使用该模块的四个网络——MANTRA、TAC、KiiChain和Nesa——似乎都受到了该漏洞的影响，该漏洞上周被悄然修复。
The module’s developer, Cosmos Labs, was eventually forced to issue a warning over the incidents, advising that validators of affected networks “halt their chains.”
该模块的开发者Cosmos Labs最终被迫就这些事件发出警告，建议受影响网络的验证者“暂停其链”。
An ongoing security incident has impacted users of the Cosmos EVM module. Cosmos Labs’ security and engineering teams have been proactively responding to this incident. We have advised the Cosmos EVM chains that are in contact with us to request that validators halt their chains.…
一起持续的安全事件影响了Cosmos EVM模块的用户。Cosmos Labs的安全和工程团队一直在积极应对此事件。我们已建议与我们联系的Cosmos EVM链要求验证者暂停其链……
— Cosmos Labs (@cosmoslabs_io) August 24, 2026
—— Cosmos Labs (@cosmoslabs_io) 2026年8月24日
Read more: YZi Labs-backed BounceBit Chain shuts down after $3M exploit
阅读更多：YZi Labs支持的BounceBit Chain在遭遇300万美元攻击后关闭
The original disclosure, branded “negligent AF,” matches Cosmos’ policy of a “silent patch model.”
最初的披露被形容为“疏忽至极”，符合Cosmos的“静默补丁模式”政策。
However, it appears that dissemination efforts of the fix were insufficient to avert the incidents on the aforementioned networks.
然而，修复措施的传播似乎不足以避免上述网络上的事件发生。
Although the release notes state that “this release contains important security fixes. We recommend all chains upgrade to this patch release as soon as possible using a coordinated upgrade,” there was no warning on Cosmos Labs’ official X account.
尽管发布说明指出“此版本包含重要的安全修复。我们建议所有链尽快使用协调升级升级到此补丁版本”，但Cosmos Labs的官方X账户上没有发出警告。
Protos has reached out to Cosmos Labs for details on any private disclosures, but hadn’t received a response by time of publication.
Protos已联系Cosmos Labs以获取任何私下披露的细节，但在发布时尚未收到回复。
Read more: Saga becomes latest victim in DeFi hacking spree
阅读更多：Saga成为DeFi黑客攻击潮中的最新受害者
Four blockchains affected
四条区块链受影响
In advance of Cosmos Labs’ warning, both MANTRA and Nesa had advised of chain halts, with seemingly no user funds affected.
在Cosmos Labs发出警告之前，MANTRA和Nesa都已建议暂停链，似乎没有用户资金受到影响。
Two further networks, TAC and KiiChain, weren’t so lucky.
另外两个网络TAC和KiiChain则没那么幸运。
On August 22, KiiChain wallets were drained of a total of almost 150 million KII. The tokens were worth over $9 million at the time — in theory — however, the proceeds were dumped for just $1.6 million of BUSD, briefly crashing the token’s price.
8月22日，KiiChain钱包被抽走了总计近1.5亿KII。当时这些代币理论上价值超过900万美元，然而，收益仅以160万美元的BUSD被抛售，导致代币价格短暂暴跌。
KiiChain called the loss “avoidable” in a post mortem report to X, openly blaming Cosmos Labs’ disclosure process.
KiiChain在一份事后报告中称该损失“本可避免”，并公开指责Cosmos Labs的披露流程。
“Publishing a security fix in the open, before the chains running that code have been told privately and given time to patch, hands the vulnerability to anyone reading the commit,” it said.
“在运行该代码的链被私下告知并给予时间修补之前，公开发布安全修复，等于将漏洞拱手交给任何阅读提交的人，”报告称。
The report also points to lack of advance notice, a failure to flag the update as critical and a delay in communicating the patch as contributing factors.
报告还指出缺乏提前通知、未能将更新标记为关键以及补丁沟通延迟是促成因素。
On the same day that KiiChain was exploited, Telegram-focused TAC network saw three billion TAC tokens, valued at around $7.5 million, drained from its staking contract.
在KiiChain遭受攻击的同一天，专注于Telegram的TAC网络从其质押合约中被盗走了30亿TAC代币，价值约750万美元。
In addition to this week’s chaos, another Cosmos EVM network, Saga EVM, lost approximately $7 million in January.
除了本周的混乱之外，另一个Cosmos EVM网络Saga EVM在1月份损失了约700万美元。
Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.
有线索吗？请通过Protos Leaks安全地给我们发送电子邮件。要获取更多有见地的新闻和调查，请在X、Bluesky和Google News上关注我们，或订阅我们的YouTube频道。
The post Cosmos Labs under fire over disclosure of bug affecting four blockchains appeared first on Protos.
这篇题为“Cosmos Labs因披露影响四个区块链的漏洞而受到批评”的文章最初出现在Protos上。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力