MANTRA Chain halted its network after detecting an exploit involving its Cosmos EVM module. The incident was isolated to two MANTRA-controlled wallets and was traced to a vulnerability in an upstream dependency. MANTRA contained the immediate threat, prepared a patched release, and stated that no user funds were exploited

An attacker exploited an unsigned integer underflow vulnerability in the upstream Cosmos EVM module to unauthorizedly transfer approximately 720.9 million MANTRA from two MANTRA-managed addresses (the burn address and a dormant genesis-era multisig). The chain was halted to contain the threat and later resumed after a v8.4.0 patch. No validator keys, admin privileges, or user funds were compromised.