Cosmos Labs Sat on EVM Bug 4 Months Before $5.7M Drain
Four-month triage miss is the bigger story. Cosmos Labs assumed 18-decimal chains were safe, six networks got drained, and disclosure norms for the $7B Cosmos stack just got rewritten.
Every Zipp story tagged #Vulnerability, newest first.
Four-month triage miss is the bigger story. Cosmos Labs assumed 18-decimal chains were safe, six networks got drained, and disclosure norms for the $7B Cosmos stack just got rewritten.
Nearly 1,200 addresses and 1,000 BTC later, the incident has crossed from isolated phishing to a coordinated drain, putting self-custody users on notice about supply-chain risk in hardware wallets.
Orchard's privacy shield means a counterfeiting flaw cannot be ruled out retroactively, and the market is treating that uncertainty as if it had already happened.
Zcash plunged 48% after it emerged that Claude AI identified a critical vulnerability in the ZEC protocol that would…
A patched Orchard circuit vulnerability — present since May 2022 — turned a 31% ZEC drawdown into a referendum on whether AI-assisted white-hat review can outrun AI-assisted attackers.