Attacker Steals $50 Million in NES, Only Profits $60,000
The attacker exploited a vulnerability in the Cosmos EVM shared module to steal $50 million worth of NES tokens, but ultimately only made a profit of about $60,000. Cosmos Labs had previously reported a security flaw in its shared Cosmos EVM software, affecting multiple chains built on that module, including Nesa. The main attacker, with an address starting with 0x9AE7, had previously spent $250,000 to purchase NES and cross-chain it to Nesa Chain. They then exploited the vulnerability to inflate their account balance by 200 times, transferring $50 million in NES back to Ethereum, with the initial funds coming from Monero. The attacker dispersed the tokens across multiple wallet addresses, exchanged NES for ETH on a DEX, and then deposited the proceeds into a centralized exchange. Due to the rapid withdrawal of funds from the liquidity pool, most of the attacker's exchange transactions faced severe slippage, resulting in an actual expenditure of $255,000 to initiate the attack, while only cashing out $315,000, yielding a net profit of about $60,000. Bubblemaps noted that although another Cosmos EVM chain had suffered a similar attack of $1.4 million the day before, the differences in funding sources and operational methods suggest that the two incidents may have originated from different attackers. The report mentioned that the price of NES tokens plummeted by 90% at one point but has since rebounded significantly, with the team believing that the recovery is mainly due to arbitrage activities resulting from price mismatches between DEX and CEX after the attack.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Cosmos Labs Faces Criticism Over Disclosure Bug Issue, Leading to Recommendations for EVM Chains to Halt Operations

Cosmos EVM Module Faces Security Incident, Multiple Chains Affected

A Practical Guide to FOMO: How to Find People and Coins in Social Trading?

Alpaca Partners with Kalshi to Add Prediction Markets to Its Stock and Cryptocurrency Infrastructure

Crypto May Be in a Very Good Selective Buying Window

Park Young-sun: "The Second Act of the AI Economy Begins... Agents, Stablecoins, and Physical AI"

Cronos restarts network after emergency halt over Tectonic exploit

NOT A HOTEL Announces Collaboration with Pokémon

Ripple unlocks 1B XRP as escrow falls to 31.28B

Latest Non-Farm Payroll Forecast: Job Growth May Slow, Fed Faces Complex Choices

$40 Trillion U.S. Debt Alarm Sounds, BlackRock Unexpectedly Bullish on Bitcoin and Gold

Russia opens regulated crypto trading as new law takes effect

What is liquidation? The trading minute

Crypto: The Clarity Act has only a 13% chance of being adopted

Digital Day: What Professions Are Lacking in the Crypto Market and Where to Acquire Them

SEC to Accept Public Comments on Crypto Asset Regulation Until October 20

CME launches crypto indexes tracking XRP, SOL, HYPE and other altcoins

KuCoin Ventures Weekly Report: Waller Strengthens Rate Hike Expectations, ETF Funds Significantly Flow Back, RWA Narrative and Attention Assets Reshape the Crypto Market

Coincheck G Partners with French DFNS to Explore Custody Solutions for Institutional Investors

Monthly Column Report | Foresight News Outstanding Content Creators List for August 2026

Singapore proposes new stablecoin rules covering foreign issuers and interest

SEC and FDA sign 3-year market integrity pact

Rising Yield on Japan's 2-Year Bonds; Does Yen Carry Trade Threaten Bitcoin Again?

Hyperliquid in Talks with Kraken's Parent Company Payward for U.S. Expansion

Why Was the Messi Retirement Token Issued Without Liquidity?

US Open Partners with Kalshi for Last-Minute Deal, Officially Introducing Prediction Market

Are Stablecoins Really "Stable"? Considering Redemption, Settlement, and Revenue Structures ("So That's How It Is Blockchain Ep.15" Yoshihiko Uchida, Yuya Sakai, Shinya Otsuga)

The Short Squeeze Logic of Meme Stocks Moves from NYSE to the Robinhood Chain

Sui to Host 'Basecamp 2026' in Singapore, Highlighting Agentic Economy





