Nesa
Aug 24, 2026
Nesa was exploited through a Cosmos EVM vulnerability involving inconsistent balance accounting between Cosmos EVM and the Cosmos SDK. In the shared exploit mechanism documented by Cosmos Labs, delegation of locked tokens from a vesting account through the staking precompile could cause an unchecked EVM balance underflow to approximately 2^256.
The resulting artificial balance could then be used to overflow a high-balance victim account, reducing the victim balance to zero while transferring its legitimate tokens to the attacker, with no net increase in token supply. Nesa has confirmed exploitation of a Cosmos EVM vulnerability but has not publicly disclosed its Nesa-side exploit transaction or victim account, so application of the exact shared mechanism to Nesa remains strongly supported but not independently demonstrated at transaction level.
- Target
- Other
- Classification
- Token & Share Accounting
- Technique
- Arithmetic Error
- Attribution
- Unknown
- Chains
Event timeline
- Aug 24, 2026Exploit executed — $50.0M drained via arithmetic error
- Attributed to Unknown
- Recovery status Unrecovered 0%
