Bubblemaps: The attackers stole $50 million of NES and actually made only $60,000

Bubblemaps wrote on platform X that the attackers used the Cosmos EVM sharing module gap to steal NES tokens worth $50 million, but eventually only earned about $60,000. Cosmos Labs had previously reported a security gap in its shared Cosmos EVM software, which affected multiple chains based on the module, including Nesa. It was revealed that the main assailant, 0x9AE7, had previously spent $250,000 to purchase NES and cross the chain to Nesa Chain, then used the loophole to make a dent of the account balance by 200 times, and to turn $50 million NES across the chain back to the Taifung, where the wallet was initially funded by Monroe. The attackers then spread the tokens to multiple wallet addresses, exchange NES for ETH on DEX, and deposit the proceeds on the Centralized Exchange. As a result of the rapid withdrawal of liquidity pool funds, most of the attackers experienced serious slippages in their exchange transactions, which actually cost $255,000 to launch the attack, cashing only $315,000 and net profits of approximately $60 million。