blockchain news
3 stories
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
A significant vulnerability within the Cosmos EVM module was reportedly exploited, leading to the draining of funds from six distinct blockchains. The attacks occurred between August 20 and August 25, 2026, targeting a flaw that Cosmos Labs was aware of prior to the incidents. The issue was specifically linked to the handling of balances within vesting accounts, a critical component for…
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver RAT
Researchers have uncovered a software supply chain attack involving seven malicious npm packages targeting the Vite frontend tooling ecosystem. These packages, collectively named ViteVenom, were found to employ a sophisticated, multi-tier blockchain-based command-and-control (C2) infrastructure to deliver a remote access trojan (RAT) to compromised systems.
Windsurf IDE Extension Drops Malware via Solana Blockchain
Security researchers have identified a malicious extension for the Windsurf Integrated Development Environment (IDE) that leverages the Solana blockchain to deploy a multi-stage malware payload. The extension, masquerading as a support tool for the R programming language, was designed to steal sensitive data from Chromium-based browsers.