KiiChain
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·3LKhiw…UEi1Summary
KiiChain, a Cosmos SDK Layer 1 chain built by Kii Global for FX and cross-border payment settlement, lost 148,326,583.15 KII tokens (nominally about $9.7 million, with an estimated $1.6 million actually realized by the attacker) on August 22, 2026, after an attacker exploited a shared, three-part integer underflow vulnerability in the Cosmos EVM precompile layer across 18 sequential transactions. The same underlying Cosmos EVM defect was used to attack MANTRA Chain and the TAC Protocol in the same window, and KiiChain has publicly disputed Cosmos Labs' disclosure and coordination timeline. The network halted at block 9,355,723 and resumed six days later; roughly 54% of the drained tokens remained on-chain and were frozen, while the rest were bridged to BNB Chain via Hyperlane and largely liquidated before the chain resumed.
Connected Entities
1 entities · 10 linked investigationsTimeline(11 events)
April 2026
One of the three underlying Cosmos EVM defects was allegedly first reported to Cosmos Labs through its bug bounty program, months before public disclosure or exploitation, per Rekt News and crypto.news reporting.
crypto.newsAugust 2026
KII token reportedly launched and subsequently reached an all-time high near $0.0977.
Rekt News19 August 2026
Cosmos Labs publicly released a patch (cosmos/evm v0.7.2) addressing one of the three underlying defects, without an accompanying security advisory.
crypto.news20 August 2026
First known attack in the campaign begins, targeting MANTRA Chain, roughly 20 hours after the Cosmos Labs patch was published.
crypto.newsAugust 2026
MANTRA Chain halted after losing approximately 720.9 million tokens (about $3.6 million) to the same exploit technique.
Rekt NewsAugust 2026
Attacker drains 148,326,583.15 KII from KiiChain across 18 sequential attack transactions exploiting the Cosmos EVM underflow; TAC Protocol is also attacked the same day, losing approximately 2.98 billion TAC.
Rekt NewsAugust 2026
Cosmos Labs issues its first public acknowledgment of an "ongoing security incident"; KiiChain also publishes its own incident report the same day.
The DefiantAugust 2026
Cosmos Labs publicly recommends that unpatched Cosmos EVM chains halt operations, roughly six days after the vulnerable release shipped and after MANTRA, TAC, and KiiChain had already been attacked.
cryptopotato.comAugust 2026
KiiChain resumes block production, stating no user funds were ultimately lost, and Cosmos Labs publishes a fuller postmortem of the incident.
Rekt NewsDecision Log
- hash: 2za1YgehuCLLtUEMrqiDNhrRPUDkNAJDMBQHcpdAdK5N
This investigation is cryptographically anchored to the Solana blockchain (1 event). 9 of 11 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 9/11/2026, 5:08:24 PM
last updated: 9/12/2026, 2:23:00 AM
avoid.net — verified advice for a post-truth world