Lookonchain APP

App Store

Bubblemaps: Attacker exploited a vulnerability to generate $50 million in NES, netting only $60,000 in profit.

2026.08.26 22:13:26

On-chain analytics platform Bubblemaps published a report stating that Cosmos Labs previously disclosed a security vulnerability in its shared Cosmos EVM software, which has affected multiple blockchains using this module, including Nesa. The main attacker address 0x9AE7 first purchased approximately $250,000 worth of NES and bridged it to Nesa Chain, then exploited the balance vulnerability to inflate its holdings by 200 times, before bridging back around $50 million worth of NES to Ethereum. The wallet was initially funded with Monero-related funds; afterward, the attacker dispersed the tokens to multiple addresses, swapped NES for ETH via decentralized exchanges (DEXs), and deposited the proceeds into centralized exchanges. Due to the rapid withdrawal of liquidity from liquidity pools, most of the attacker’s trades experienced severe slippage. Bubblemaps noted that the attacker spent a total of roughly $255,000, ultimately receiving approximately $315,000 from the sale, resulting in a net profit of only about $60,000. NES’s price plummeted by 90% at one point, but has since recovered significantly, likely driven by arbitrage opportunities from price discrepancies between DEXs and centralized exchanges post-attack. Another Cosmos EVM project suffered an attack of around $1.4 million during the same period, but with distinct funding sources and operational methods, possibly carried out by a separate attacker.

Relevant content

US CFTC Chairman: Will Push Forward Voluntary Federal Registration Mechanism for Crypto Trading Platforms

Commodity Futures Trading Commission (CFTC) Chair Mike Selig issued a statement saying that crypto markets should enjoy the same safeguards as the mature protection mechanisms that have been in place for U.S. derivatives markets for decades. As Congress has yet to take action, the CFTC is advancing a voluntary federal registration regime for crypto trading platforms, bringing its regulatory standards closer to the high-level oversight framework of U.S. financial markets.

6 minutes ago

PeckShield: X100 attacker transfers 821 ETH to Tornado Cash

PeckShield said in a post that a wallet address marked as the X100 attacker has transferred 821.2 ETH to mixing protocol Tornado Cash, worth approximately $1.89 million. X100 (token symbol: X) suffered a flash loan governance attack on October 24, incurring losses of around $4.75 million. Following the incident, the X token plunged 96% in the past 24 hours.

6 minutes ago

Morgan Stanley Survey: Chinese Enterprises Require Humanoid Robots Priced Under 100,000 Yuan With A Three-Year Payback Period

Morgan Stanley’s latest survey indicates that Chinese enterprises’ willingness to procure humanoid robots remains on the rise, though the pace of commercial deployment has slowed, with cost and return on investment (ROI) emerging as key barriers. Among surveyed firms, 64% plan to launch humanoid robot pilot or large-scale projects over the next three years, but deployment timelines for all robot types have been pushed back by roughly a year overall. The survey found 72% of potential buyers deem a robot’s unit price must be below 100,000 RMB to be viable for widespread adoption, up from 53% in 2025; 82% require a payback period of no more than three years, with an average acceptable payback cycle of around 26 months. In applications, manufacturing and logistics warehousing remain the primary use cases, with prominent demand for material handling, packaging, and palletizing. However, satisfaction with existing products has dipped, with only 18% of potential buyers expressing satisfaction with current humanoid robot performance. On the brand front, Unitree Robotics remains the most widely followed integrator, but the share of respondents planning to purchase its products over the next three years has fallen from 60% in 2025 to 32%. Morgan Stanley notes that vendors that can prove improved production efficiency, meet reliability standards, and deliver clear ROI are better positioned to drive the commercialization of humanoid robots.

6 minutes ago

U.S. stocks extended their gains, with the Nasdaq rising 1.00% and the S&P 500 index up 0.78%.

According to market data from BIT (Bit.com), US stock gains have widened: the Nasdaq is up 1.00% at 26215.018 points; the Dow Jones Industrial Average is up 0.54% at 52499.230 points; and the S&P 500 index is up 0.78% at 7682.910 points.

6 minutes ago

Canada is holding a public consultation on its stablecoin regulatory draft, and continues to ban stablecoin issuers from paying interest.

Canada’s Department of Finance has launched a 60-day public consultation on its stablecoin regulatory draft, with a deadline of December 23. The draft continues to ban stablecoin issuers from paying interest on holdings directly or via third parties, but allows rewards tied to transaction activities. Under the draft, non-bank stablecoin issuers must back circulating fiat-pegged stablecoins with equivalent reserve assets at a 1:1 ratio, and hold those reserves in eligible Canadian financial institutions, including banks, credit unions, and trust companies. User redemptions of stablecoins must be processed within 3 business days, and redemption fees may not exceed 1%. Canada previously passed the Stablecoin Act, and this regulatory framework aims to clarify the requirements issuers must meet to register with the Bank of Canada. The framework is expected to take effect around the end of 2027. The draft comes as Canada’s banking sector is pushing for a ban on stablecoin payment yields to prevent funds from flowing out of traditional bank deposits into stablecoins. Meanwhile, some Canadian crypto platforms have been authorized to offer yields to eligible stablecoin holders.

6 minutes ago

Goldman Sachs: Global tech stocks saw net selling of $20 billion over two weeks, with risks surrounding AI financing heating up.

Goldman Sachs data shows that global tech stocks have seen net selling of around $20 billion over the past two weeks, with sell-off intensity reaching an extreme level of -3.3 standard deviations. The TMT sector’s sell-off volume is close to the $23 billion recorded in July this year. Meanwhile, the volatility spread between the Nasdaq 100 Index and the S&P 500 Index has risen to the 98th percentile of its five-year range, indicating a significant increase in market demand for safe-haven assets tied to tech stocks. AI financing pressures have also become a key market focus. According to JPMorgan, AI infrastructure debt financing has exceeded $500 billion so far this year, and financing costs for large-scale cloud service providers have risen by around 120 basis points from previous levels. As Google, Microsoft, and Amazon release their earnings reports this week, the market will closely monitor whether AI capital expenditures can translate into actual revenue, as well as the financing sustainability of subsequent investment expansion. JPMorgan points out that the financing connection between NVIDIA and GPU operators could act as a channel for credit risk transmission; should operators face tighter financing conditions, pressure may spread upstream along the supply chain. That said, the bank remains constructive on the tech sector’s fundamentals, noting a potential buying window in early November, though signals including further clearing of market positions, corporate earnings delivery, and narrowing credit spreads still need to be observed.

6 minutes ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano