Skip to main content
Sign in

MANTRA Chain Upstream Exploit (August 2026)

avoid.net/mantra-chain-upstream-exploit-august-202632/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5wmbZX…t7uq

Summary

On August 20-21, 2026, MANTRA Chain halted all block production after an attacker exploited a critical vulnerability (ASA-2026-002) in the shared Cosmos EVM ICS20 precompile, a component developed by Cosmos Labs and used by multiple chains. MANTRA's OM token fell 18.5% to an all-time low of $0.004126 during the approximately 30-hour outage, and the chain resumed on August 22 after deploying patched version 8.4.0. MANTRA stated no user funds were exploited and that only two project-managed wallets were affected, but the team has not published a technical post-mortem nor disclosed what, if anything, was extracted from those wallets, leaving the full financial scope of the incident unresolved as of August 27, 2026.

Connected Entities

1 entities
Organizations
MANTRA Chain Upstream Exploit (August 2026)
Relationships
    Have evidence about MANTRA Chain Upstream Exploit (August 2026)?

    Timeline(8 events)

    2026

    Saga EVM network suffers an estimated $7 million exploit via the same ICS20 precompile vulnerability class (ASA-2026-002); attacker mints uncollateralized stablecoin using forged IBC messages and bridges proceeds to Ethereum.

    MANTRA Chain Hacked Via Cosmos EVM Bug That Already Cost Saga $7M in January — TechTimes

    March 2026

    Cosmos Labs releases v0.6.0 of the Cosmos EVM module, silently patching ASA-2026-002, without advance private notification to downstream chains.

    ASA-2026-002 Security Advisory — cosmos/evm GitHub

    16 June 2026

    Inveniam Capital Partners announces agreement to acquire MANTRA following a $20 million strategic investment; deal targeted to close by June 30, 2026.

    Inveniam to Acquire MANTRA — GlobeNewswire

    20 August 2026

    MANTRA Chain detects an active attacker exploiting the Cosmos EVM ICS20 precompile vulnerability in two project-managed wallets. Network halts block production at approximately 11:13 p.m. UTC (last block: 17,449,398). All transactions, endpoints, bridge operations, and exchange deposits/withdrawals are frozen.

    MANTRA token plunges 18% to record low as blockchain halts after exploit — CoinDesk

    21 August 2026

    MANTRA's OM token falls approximately 18.5% to a then-record low of $0.004126. Trading volume surges approximately 600% to roughly $24 million. MEXC suspends MANTRA deposits and withdrawals. At 9:45 a.m. UTC, MANTRA announces it has identified the root cause as isolated to the Cosmos EVM module affecting two wallet addresses, and states no user funds were exploited.

    MANTRA Chain Halts Network After Unidentified Incident — The Crypto Times

    22 August 2026

    KiiChain suffers 18 repeated exploit attempts draining approximately 148.3 million KII tokens (sold for roughly $1.6 million). TAC Network halted after approximately 3 billion TAC tokens (valued at roughly $7.5 million) are drained from its staking contract. MANTRA Chain resumes block production at approximately 05:30 UTC after coordinated validator upgrade to v8.4.0. Cosmos Labs publicly urges all remaining Cosmos EVM chains to halt validators.

    Cosmos Labs Confirms Cosmos EVM Incident as 3 Chains Disclose Impact — Yahoo Finance

    25 August 2026

    Cosmos Labs issues broader public advisory on the ASA-2026-002 vulnerability. Criticism of Cosmos Labs' silent patch disclosure model grows publicly.

    Cosmos Labs Urges Cosmos EVM Chains to Halt Validators, Three Now Offline — The Crypto Times

    27 August 2026

    MANTRA has not published a technical post-mortem. Financial details about the two affected project-managed wallets remain undisclosed. The promised post-mortem analysis has not appeared as of the date of this investigation.

    MANTRA Chain Restores Operations Following 30-Hour Cosmos-EVM Vulnerability Shutdown — Blockonomi
    Provenance & Audit Trail

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 20 of 24 cited source URLs have an Internet Archive snapshot.

    model: claude-sonnet-4-6

    generated: 8/27/2026, 5:08:08 PM

    last updated: 8/28/2026, 2:49:47 AM

    3 views

    avoid.net — verified advice for a post-truth world