TechFlow, following the BSC exploit, Cosmos co-founder Ethan Buchman stated on the official Cosmos forum that members of the Cosmos and Osmosis core teams have been conducting an extensive audit of IBC. During this process, they identified a critical security vulnerability affecting all Cosmos chains supporting IBC, across all IBC versions.
Steps have already been taken to ensure that all major public chains supporting IBC have applied the patch. Chains will no longer be at risk from the critical vulnerability once 1/3 of voting power has adopted the patch. However, once the official patch is released, the remaining 2/3 of chains should still apply it as quickly as possible. The public version of the patch will be available within 24 hours after October 14, 14:00 UTC (22:00 Beijing time), in Cosmos SDK v0.45.9 and v0.46.3.
Additionally, all chains and validators are strongly advised to immediately upgrade to the newly released patch, even if they have already applied a private fix. The patch can be deployed individually by validators without requiring a chain halt or coordinated upgrade, and should be applied as soon as possible.Original link




