Security investigators disclose a zero-day severity vulnerability in Cosmos CometBFT.

Security researcher Doyeon Park published an article on the X platform disclosing a zero-day vulnerability in the Cosmos consensus layer (CometBFT). This vulnerability, classified as CVSS 7.1 (high) severity, could cause nodes in the Cosmos ecosystem to stall during block synchronization, but direct asset theft would not be feasible. The ecosystem safeguards over $8 billion in assets. While the Cosmos vulnerability disclosure (CVD) process has been followed to ensure ecosystem security, due to a lack of cooperation and irresponsible decision-making by the vendors, the decision has been made to proceed with the disclosure based on their final decision.