Cosmos Labs disclosed an active security incident on August 24 targeting chains built with its Cosmos EVM module. Validators were advised to stop their networks and halt block production. Related incidents affected MANTRA Chain, which halted its mainnet for roughly 30 hours, and KiiChain, which said an attacker exploited a Cosmos EVM vulnerability 18 times and moved about 148.3 million KII. TAC Chain also reported an August 22 exploit involving precompile-layer vulnerabilities. The events follow a pattern of 2026 Cosmos EVM exploits, including a January SagaEVM attack that drained an estimated $7 million from 15 chains, and appear connected to the ASA-2026-002 vulnerability in the ICS20 precompile, although Cosmos Labs has not confirmed the full scope or cause. The company has not disclosed the complete list of affected chains or total value at risk and plans to publish a full incident report once the situation is contained.