MANTRA Chain Upstream Exploit (August 2026)
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·5wmbZX…t7uqSummary
On August 20, 2026, MANTRA Chain, an RWA-focused Cosmos-based Layer 1, halted block production for about 30 hours after an attacker exploited a critical vulnerability in its upstream Cosmos EVM module, the first in a wave of attacks on Cosmos EVM chains that also hit TAC and KiiChain. OM fell about 18% to a record low of $0.004126, and the chain resumed on August 22 on patched version 8.4.0. MANTRA said no user funds were exploited and that two project-managed wallets were affected; crypto.news reported about 720.9 million OM (roughly $3.6 million) drained from MANTRA. Sources disagree on which Cosmos EVM advisory was exploited and on how the fix was disclosed.
Connected Entities
13 entities · 60 linked investigations- MANTRA Chain Upstream Exploit (August 2026)→mentioned with→MEXC(65%)
- MANTRA Chain Upstream Exploit (August 2026)→mentioned with→KiiChain(70%)
- MANTRA Chain→mentioned with→KiiChain(70%)
- MANTRA Chain Upstream Exploit (August 2026)→mentioned with→Ethereum(65%)
- Cosmos EVM Vulnerability — August 2026 Six-Chain Exploit→mentioned with→KiiChain(70%)
- TAC Network→mentioned with→Ethereum(75%)
- Cosmos EVM Vulnerability — August 2026 Six-Chain Exploit→mentioned with→Cosmos (ATOM)(70%)
- TAC Network→mentioned with→KiiChain(70%)
- Cosmos Labs→mentioned with→MANTRA (OM Token)(75%)
- Cosmos Labs→mentioned with→KiiChain(70%)
- + 33 more
1 submission awaiting moderator review.
Timeline(17 events)
April 2025
OM collapses more than 90% in about an hour, erasing over $5.4 billion in market capitalization.
ForbesJanuary 2026
Saga EVM network suffers an estimated $7 million exploit via the ICS20 precompile vulnerability class; forged IBC messages used to mint an uncollateralized stablecoin.
TechTimesMarch 2026
Cosmos Labs reportedly releases Cosmos EVM v0.6.0 patching ASA-2026-002 without advance private notice to downstream chains.
ASA-2026-002 Security Advisory — cosmos/evm GitHubApril 2026
GHSA-7g4w-cg88-2cq2 reported through the Cosmos Bug Bounty Program on HackerOne; initially assessed as not affecting production chains.
Cosmos EVM Post-Mortem — cosmos/security GitHubMay 2026
Silent fix merged to the Cosmos EVM main branch without identifying the vulnerability.
Cosmos EVM Post-Mortem — cosmos/security GitHubJune 2026
Inveniam Capital Partners announces agreement to acquire MANTRA following a $20 million strategic investment.
GlobeNewswireAugust 2026
Patched Cosmos EVM releases v0.6.2 and v0.7.2 published with vague security notes, about 20 hours before the first attack.
crypto.newsAugust 2026
At 07:16 UTC, Push Chain publicly posts exploit methodology and vulnerable release tags on GitHub (pushchain/push-chain-evm#40).
Cosmos EVM Post-Mortem — cosmos/security GitHubAugust 2026
First known attack on MANTRA Chain begins at about 19:06 UTC.
Cosmos EVM Post-Mortem — cosmos/security GitHubAugust 2026
MANTRA halts block production at block 17,449,398 at about 23:13 UTC; transactions, endpoints, bridge operations and exchange deposits/withdrawals frozen.
CoinDeskAugust 2026
OM falls about 18% to a record low of $0.004126 on volume up about 600%; MEXC suspends deposits and withdrawals. At 9:45 a.m. UTC MANTRA says the root cause is isolated to the Cosmos EVM module affecting two wallets and that no user funds were exploited.
The Crypto TimesAugust 2026
MANTRA resumes block production at about 05:30 UTC on v8.4.0 after about 30 hours offline; no rollback.
CoinPaprikaAugust 2026
TAC exploited at about 19:46 UTC and halted at block 24,671,475 after about 3 billion TAC (~$7.5M) drained; KiiChain attacked from about 21:00 UTC, with about 148.3 million KII drained across 18 attacks.
The Crypto Times; Yahoo FinanceAugust 2026
Cosmos Labs urges all Cosmos EVM chains to have validators halt, citing an ongoing security incident, and coordinates with about 40 chains (another account dates this call August 22).
The Crypto TimesAugust 2026
Cosmos Labs closes the active exploit response window at 15:20 UTC; about $5.72 million in losses tracked across six chains. Public criticism of the disclosure process grows.
Cosmos EVM Post-Mortem — cosmos/security GitHubAugust 2026
MANTRA has still not published its promised technical post-mortem; details of the two affected wallets remain undisclosed.
BlockonomiAugust 2026
Cosmos Labs publishes its full post-mortem for GHSA-7g4w-cg88-2cq2, covering the underflow/overflow exploit chain, the disclosure failures and the Push Chain posting.
Cosmos EVM Post-Mortem — cosmos/security GitHubDecision Log
- slot 443526684 · hash 9gMRHYj5ZbWnkBsQ3JyWC77VpexbQCMf9nevgJv4wxve
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 31 of 33 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 8/27/2026, 5:08:08 PM
last updated: 10/2/2026, 5:29:35 AM
3 viewsavoid.net — verified advice for a post-truth world