Foresight News|Aug 26, 2026 14:04
**[Bubblemaps: Attacker Steals $50 Million NES, Only Profits $60,000]**
Foresight News reports that Bubblemaps tweeted an update stating that an attacker exploited a vulnerability in the Cosmos EVM shared module to steal $50 million worth of NES tokens but ultimately only profited approximately $60,000. Previously, Cosmos Labs had reported a security flaw in its shared Cosmos EVM software, which affected multiple chains built on this module, including Nesa.
According to disclosures, the primary attacker, whose address begins with 0x9AE7, had previously spent $250,000 to purchase NES and bridged it to the Nesa Chain. The attacker then exploited the vulnerability to artificially inflate their account balance by 200 times and bridged $50 million worth of NES back to Ethereum. The initial funds in this wallet originated from Monero. The attacker subsequently dispersed the tokens across multiple wallet addresses, swapped NES for ETH on DEXs, and deposited the proceeds into centralized exchanges.
Due to the rapid withdrawal of liquidity pool funds, most of the attacker's swap transactions suffered severe slippage. The attacker spent $255,000 to execute the attack but only cashed out $315,000, resulting in a net profit of approximately $60,000. Bubblemaps noted that although another Cosmos EVM chain experienced a similar $1.4 million attack the day before, differences in funding sources and operational methods suggest the two incidents were likely carried out by different attackers.
The report also mentioned that the price of NES tokens initially plummeted by 90% but has since rebounded significantly. The team believes the recovery was primarily driven by arbitrage opportunities arising from price mismatches between DEXs and CEXs following the attack.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink