MANTRA Chain Cosmos EVM exploit (2026-08-20): 720.9M MANTRA (~$3.6M) taken from burn address and genesis multisig, attacker wallet per MANTRA
- Scam type: Hack
- Chain: Cosmos ecosystem (MANTRA)
- Project or site name: MANTRA Chain
- Incident date: 2026-08-20
- Reported: 2026-10-23
- Last updated: 2026-10-23
On 2026-08-20 an attacker used an unsigned-integer underflow in the shared cosmos/evm module, combined with a specially built vesting account and a call through the staking precompile, to move 720,923,967.99 MANTRA out of two accounts that never signed: 600,000,035.56 from the chain's burn address and 120,923,932.44 from a legacy genesis-era multisig. MANTRA values this at about $3.6M at the pre-incident price of $0.005. Primary source: MANTRA, "MANTRA Chain Exploit, 20 August 2026: Full Incident Post Mortem", published 2026-08-28 (https://x.com/MANTRA_Chain/status/2093288372995543088). It…