Cosmos Labs Slammed Over Quiet Disclosure of EVM Bug

Cosmos Labs is facing backlash from the crypto security community over its disclosure of a bug in its Cosmos EVM module that has affected four blockchains.

The bug, which was quietly patched last week, caused issues on MANTRA, TAC, KiiChain, and Nesa networks, with some users losing millions of dollars worth of tokens.

Cosmos Labs' decision to use a 'silent patch model,' where security fixes are released without warning, has been criticized for being negligent. The company was eventually forced to issue a warning advising validators on affected chains to halt their operations.

The lack of advance notice and insufficient dissemination efforts in applying the fix have raised concerns about the effectiveness of Cosmos Labs' disclosure process. KiiChain, one of the affected networks, has publicly blamed Cosmos Labs for the loss of over $9 million worth of tokens due to a delayed and inadequate communication of the patch.