This one is bad.
Cosmos EVM had a critical vulnerability. The fix existed. The issue was public and then multiple chains running the stack were hit or are being forced to halt.
The v0.7.2 release told chains to upgrade "as soon as possible using a coordinated upgrade."
Coordinated with whom?
If attackers can read GitHub, downstream teams need something better than GitHub.
Bugs happen. Enterprise infrastructure is judged by everything that happens after the bug:
who is exposed, who gets warned, who gets patched, and whether the customer or the attacker acts first.
We need the full postmortem from
@cosmoslabs_io
But there’s no sugar coating this one: the coordination failed pretty bad.