Security Flaw in Cosmos Consensus Layer Revealed

Security expert Doyeon Park has disclosed a zero-day vulnerability in the Cosmos consensus layer, CometBFT, on the X platform. According to Odaily, the flaw has a CVSS severity rating of 7.1, indicating a high level of risk. This vulnerability could cause nodes within the Cosmos ecosystem to stall during block synchronization, although it does not allow for direct asset theft. The ecosystem safeguards assets valued at over $8 billion. The disclosure followed the Coordinated Vulnerability Disclosure (CVD) process to ensure ecosystem security. However, due to a lack of cooperation and responsible decision-making from the vendor, Park decided to proceed with the disclosure based on the vendor's final decision.