KiiChain

Cosmos

Hyperlane

BounceBit

KiiChain has halted its blockchain after an <a href="https://x.com/KiiChainio/status/2091330990027296992" rel="noopener noreferrer nofollow">EVM-module vulnerability</a> allowed an attacker to move funds out of the network through Hyperlane and onto BNB Smart Chain.
The team is tracing the assets with security and infrastructure partners while the network remains stopped. KiiChain has so far confirmed the cross-chain movement but has not published a verified loss amount, attacker address set or number of affected accounts.
<h2 id="evm-vulnerability-opened-route-to-bnb-smart-chain">EVM Vulnerability Opened Route to BNB Smart Chain</h2>
KiiChain operates an <a href="https://cryptoadventure.com/evm-chains-explained-what-they-are-and-why-they-matter/" rel="noopener noreferrer nofollow">EVM-compatible Layer 1</a> built with the Cosmos SDK. Its EVM module is based on Cosmos EVM, allowing Ethereum-style transactions and smart contracts to run alongside the <a href="https://cryptoadventure.com/cosmos-gas-and-fees-explained-why-a-transfer-fails-even-with-tokens-in-your-wallet/" rel="noopener noreferrer nofollow">network’s Cosmos infrastructure</a>.
The initial disclosure places the vulnerability inside that EVM layer. Hyperlane was used as the cross-chain route for moving the funds to BSC, rather than being identified as the vulnerable component.
KiiChain uses Hyperlane as part of its interoperability stack, connecting the network with external blockchains for asset transfers. The chain halt prevents further transactions while investigators trace the BSC-side fund movements and determine the full scope of the attack.
The breach lands shortly after KII began public trading in mid-August, with the token designed to support transaction fees, network security and liquidity incentives across KiiChain’s onchain foreign-exchange infrastructure.
<h2 id="kiichain-had-already-patched-cosmos-evm-software-in-july">KiiChain Had Already Patched Cosmos EVM Software in July</h2>
KiiChain’s EVM stack had undergone security work shortly before the attack. A <a href="https://github.com/KiiChain/kiichain/releases" rel="noopener noreferrer nofollow">v7.3.0 upgrade</a> shipped in July using a Cosmos Labs-coordinated Cosmos EVM hotfix that was initially distributed through a private patched dependency ahead of a July 27 public security disclosure.
The coordinated upgrade was state-machine breaking and required validators to move to the patched EVM dependency at the same block height. Sunday’s incident disclosure identifies the EVM module as the source of the new vulnerability but does not yet identify the affected function or transaction sequence.
A separate <a href="https://hacken.io/audits/kiichain/l1-kiiex-l1-audit-mar2026/" rel="noopener noreferrer nofollow">Hacken audit</a> finalized in July reviewed KiiChain’s Layer 1 codebase, including its EVM-related architecture. The assessment recorded 36 findings across the reviewed scope, with 25 resolved, four mitigated and seven accepted. One finding was rated high severity and six were rated medium.
The current attack will require a transaction-level post-mortem to determine which EVM path was abused and whether the exploited code was part of the previously reviewed or subsequently upgraded software.
<h2 id="kiichain-halt-follows-mantra-bouncebit-and-maya-exploits">KiiChain Halt Follows MANTRA, BounceBit and Maya Exploits</h2>
KiiChain is the latest network to stop block production during a concentrated run of chain-level security failures.
A separate <a href="https://cryptoadventure.com/mantra-chain-halts-after-upstream-software-exploit-as-token-hits-record-low/" rel="noopener noreferrer nofollow">MANTRA Chain halt</a> began on August 21 after an attacker exploited an upstream software dependency, forcing validators and MANTRA-managed infrastructure offline while developers prepared a patch. MANTRA’s response also included disabling cross-chain infrastructure and tracing fund movements.
BounceBit then chose to permanently retire its Layer 1 following a <a href="https://cryptoadventure.com/bouncebit-shuts-down-layer-1-after-3m-bb-exploit-moves-token-to-bnb-chain/" rel="noopener noreferrer nofollow">$3 million BB exploit</a> that allowed 286.5 million BB to move through 14 unauthorized transactions. Its recovery plan will reissue BB directly on BNB Chain from a pre-exploit snapshot.
Earlier in the week, a multi-bug <a href="https://cryptoadventure.com/maya-protocol-halts-network-after-1-7m-exploit-drains-20-btc/" rel="noopener noreferrer nofollow">Maya Protocol exploit</a> forced another network-wide pause after roughly $1.7 million in assets was extracted.
KiiChain remains halted while its team and security partners trace the funds moved to BSC. The network’s next update is expected after the affected transactions and loss scope have been verified.
The post <a href="https://cryptoadventure.com/kiichain-halts-network-after-evm-exploit-moves-funds-through-hyperlane-to-bsc/" rel="noopener noreferrer nofollow">KiiChain Halts Network After EVM Exploit Moves Funds Through Hyperlane to BSC</a> appeared first on <a href="https://cryptoadventure.com" rel="noopener noreferrer nofollow">Crypto Adventure</a>.

KiiChain Halts Network After EVM Exploit Moves Funds Through Hyperlane to BSC

Table of Contents

Crypto Adventure

Other articles published on Aug 23, 2026

Join our free newsletter for daily crypto updates!