Mantra suffers $3.6 million loss from Cosmos EVM underflow bug
An attacker exploited a Cosmos EVM underflow bug to drain 720 million MANTRA tokens from Mantra, resulting in a loss of $3.6 million. The incident occurred before a halt was implemented, with the majority of the tokens already reaching an exchange.
An attacker exploited a confirmed Cosmos EVM underflow bug to drain 720 million MANTRA tokens from Mantra, leading to a financial loss of $3.6 million. The attack was executed before the platform could implement a halt, resulting in 94.7% of the drained tokens already being transferred to an exchange.
The underflow bug allowed the attacker to manipulate the token balance, facilitating the large-scale theft. This vulnerability not only affected Mantra but also led to similar incidents on three additional chains days later, indicating a broader issue with the Cosmos EVM.
The on-chain record shows that a significant portion of the stolen tokens was moved to an exchange, complicating recovery efforts. The incident highlights the risks associated with smart contract vulnerabilities and their potential impact across multiple platforms.