MANTRA Chain Cosmos-EVM Module Exploit — Full Recovery, No User Funds Affected

Aug 21, 02:44 UTC: MANTRA detects the incident and halts the chain as a precaution; all endpoints and transactions frozen. 03:23 UTC: Freeze confirmed across all endpoints; deposits/withdrawals paused with exchange partners. 05:39 UTC: Team confirms ongoing investigation with external partners, warns users against fake 'recovery' services. 07:57 UTC: Official confirmation that an attacker exploited 'a vulnerability in an upstream dependency used by the chain.' Fund tracing begins in coordination with exchange partners. 10:28 UTC: Independent on-chain analyst Rarma publishes a full technical breakdown identifying the Cosmos-EVM stack as the true root cause (not MANTRA's app logic) and names the attacker address mantra13n9sk3p8x7tpq9adgxvzv9q0qev953mld0hwva, confirming total OM supply is unchanged and that none of the displaced funds left the chain. 11:24 UTC: MANTRA confirms the vulnerability has been identified and a patched release is in preparation; validator coordination required before restart. 12:44 UTC: @MANTRA_Chain publicly states the incident 'was isolated to the Cosmos EVM module of MANTRA Chain and affected two wallet addresses before we achieved containment. No user funds were exploited.' 15:57 UTC: Patch v8.4.0 undergoes testing on the DuKong testnet; team reiterates the incident affected only two MANTRA-managed wallets, with no indication of user, exchange, or partner fund impact. 21:44 UTC: Root cause analysis complete, v8.4.0 validated against an internal environment replicating mainnet state through repeated end-to-end upgrade rehearsals; the store upgrade itself is empty (no module changes, no state migrations), so the upgrade completes in seconds once the validator set is coordinated. Chain remains halted at block 17,449,398 pending full validator coverage — team explicitly prioritizes coordination over speed. Aug 22, 05:30 UTC: MANTRA Chain mainnet resumes producing blocks following the coordinated v8.4.0 restart. Official confirmation: 'User balances were not altered by the incident and no action is required from token holders. There was no rollback or state changes between the halt and chain resumption.' Public RPC/EVM endpoints restored; explorers and downstream services catching up. This is the only incident in the observation window fully resolved — patched and restarted — within 24 hours of window close.