Twelve Minutes, Twenty-Five Hours
A last-minute vote put $9.4M within reach. The response took Cosmos Hub offline for nearly 25 hours. Funds moved first without the applications’ multisig approval, then without the recipient’s signature.
A last-minute vote put $9.4M within reach. The response took Cosmos Hub offline for nearly 25 hours. Funds moved first without the applications’ multisig approval, then without the recipient’s signature.
A model left instructions for its successor. A bridge paid twice for one signed transaction. An oracle trusted a market its attacker had built. This week’s report follows what happened after each system said yes.
Liquid released real Bitcoin against unbacked L-BTC. Nomic’s unbacked mint became collateral on Osmosis and went undisclosed for 74 days. Two failures reveal how far a claim can travel once a system accepts it as true.
From Moonwell and Term Finance to Cosmos EVM and a federal court ruling for Anthropic, this week's failures share one shape: the control was real. It just didn't cover the path that mattered.
A wallet drain, a rewritten blockchain, a 750-fold miscount and an editor's removal all raised the same question: who had the authority to act?
The Nexus Report · August 3-9, 2026 Across hardware wallets, AI evaluations and protocol design, systems kept validating what was
A bridge quorum. An oracle price. An upgrade key. A containment boundary. Each system accepted its control as sufficient. In each case, the underlying claim went unverified. The base layers held. The control plane decided the outcome.