Cosmos Blockchain Exploit Lets Hacker Mint $50M in Tokens, Cash Out $60K

A hacker exploited a flaw in the EVM (Ethereum Virtual Machine) module used by the Cosmos blockchain network to fraudulently mint $50 million worth of NES tokens on Nesa Chain and transfer them to Ethereum. Despite the massive on-paper haul, the attacker only managed to cash out around $60,000, as the sudden flood of tokens caused liquidity pools to collapse, making it impossible to sell the full amount at any meaningful value.

Blockchain analytics firm Bubblemaps traced the stolen funds through a chain of eight wallets, ultimately linking them to an address funded using Monero, a cryptocurrency known for its strong privacy and transaction-obscuring features. This use of Monero highlights a common tactic among cybercriminals seeking to launder illicit gains while avoiding detection by investigators.

While this incident centres on cryptocurrency infrastructure rather than a typical small business system, it underscores a broader lesson: vulnerabilities in underlying software modules—whether in blockchain platforms, payment systems, or business applications—can be exploited quickly and at scale before defenders can respond. Businesses using or investing in blockchain-based services should stay alert to security advisories from these platforms.