Create

Stride

April

Security

Cosmos

Most of the code for the Cosmos Hub's Liquid Staking Module (LSM) was developed by North Korean agents, according to&nbsp;<a style="text-decoration:none" href="https://github.com/allinbits/announcements/blob/main/2024_10_15_lsmnk.md">All in Bits (AiB)</a>, a prominent contributor in the Cosmos ecosystem.
The LSM's development reportedly began in August 2021, initiated by the Interchain Foundation (ICF) and spearheaded by Iqlusion, a key player in the Cosmos ecosystem and Zaki Manian.&nbsp;
&nbsp;
The project later saw collaboration with Stride Labs, Binary Builders, and Informal Systems to integrate the LSM into Gaia. However, the pivotal role played by two North Korean developers, Jun Kai and Sarawut Sanit, who contributed a majority of the code, has come under scrutiny.
<h2 dir="ltr" id="span-span-key-events-span-span">Key Events:</h2>
<ul>
 <li>June 2021: The ICF announced funding for ongoing work on Gaia and staking derivatives.</li>
 <li>August 2021: Development of the LSM commenced, with significant contributions from North Korean developers.</li>
 <li>July 2022: An audit by Oak Security flagged critical vulnerabilities in the LSM, particularly regarding slashing evasion.</li>
 <li>March 2023: The FBI contacted Zaki Manian, revealing the North Korean links to the developers. However, this information was reportedly not disclosed to the Cosmos community.</li>
 <li>April 2023: Zaki promoted the LSM as “finished,” ignoring ongoing security concerns, per reports.</li>
</ul>
<h2 dir="ltr" id="span-span-flaws-in-the-lsm-design-span-span">Flaws in the LSM Design</h2>
The LSM’s design includes a critical flaw that allows participants to evade slashing penalties, posing a risk to the entire staking ecosystem. The Oak Security audit highlighted these vulnerabilities, yet Zaki and Iqlusion promoted the LSM as complete, creating a false sense of security.
&nbsp;
This fundamental issue contradicts the principles of proof-of-stake systems, where slashing is essential for maintaining network integrity. By framing this flaw as an intentional design feature, they allegedly misled the Cosmos community about the real risks associated with the LSM.
Call for Action
&nbsp;
In light of these revelations, AiB called for immediate action. A comprehensive audit of the LSM is essential to assess its security and integrity. According to AiB, the Interchain Foundation should:
<ul>
 <li>Create a blacklist of individuals and entities involved in promoting insecure protocols, starting with Zaki Manian and Iqlusion.</li>
 <li>Establish stringent audit requirements for any code development supported by the ICF.</li>
 <li>Develop oversight protocols to ensure thorough safety assessments before new implementations are proposed.</li>
 <li>The future security of the Cosmos ecosystem depends on addressing these issues openly and transparently. The community deserves a secure network, free from hidden risks.</li>
</ul>

Cosmos Hub's Liquid Staking Code Faces Security Risks With North Korean Links

Table of Contents

BSCN

Other articles published on Oct 23, 2024

There Is a New Message From Peter Todd, Alleged Satoshi Nakamoto

Fairshake Allocates Millions for Election Campaigns

Sui Announces Integration with Google Cloud to Boost Real-Time Blockchain Data Access

Top Crypto Picks for October 2024: Massive ROI Potential with Qubetics, Bitcoin, Ethereum, and Ca...

Bill Gates Joins Billionaire Donors Backing Kamala Harris with $50M

Solana Eyes 2000% Surge, Bonk’s New Upbit Listing, but Why Could FoxLetFun Be the Meme Coin That ...

Join our free newsletter for daily crypto updates!