← Radar

Incident case file

Sign in to watch

KiiChain Cosmos EVM Balance-Handling Underflow Exploit — 148.3M KII

Incident date Aug 21, 2026Last updated Sep 24, 2026

0 views

ContainedKiiChainShared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2)Cluster: COSMOSEVM-KII-2026-08

Estimated loss

$1.6M

Affected users

Number of affected users is not confirmed
Group joining is coming soon.

Investigation

55%

Facts and investigation

Ledger

Attacker

TODO

Funds moved to

Confirmed by KiiChain's own post-mortem: 148,326,583.15 KII extracted via 18 repeated exploit attempts on August 22.

Linked

KiiChain confirmed the exact token figure in its own official post-mortem, the only one of the affected chains to publish a precise per-chain accounting alongside Cosmos Labs' aggregate report.

Chronology

1 beat
  1. On August 22, 2026 (starting around 20:32 UTC), an attacker repeatedly exploited the same shared Cosmos EVM vulnerability (GHSA-7g4w-cg88-2cq2) already described for TAC, launching 18 separate exploit attempts against KiiChain. KiiChain's own post-mortem confirmed a total of 148,326,583.15 KII extracted, valued at roughly $9.7M nominal / $1.61M realized after conversion. This is the same shared-module underflow bug (a precomputed vesting account address, contract inheriting vesting status, then over-delegation triggering an integer underflow) exploited across MANTRA (the first victim, August 20, outside this reporting window), TAC and Nesa within this window.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)