Namada Drained of $600K as Cosmos Chains Face Two-Year-Old Vulnerabilities

Published by James Harris on June 20, 2026June 20, 2026

Namada’s multi-asset shielded pool, the core privacy mechanism of the chain, was drained of roughly $600,000 on June 20, collapsing the protocol’s total value locked from around $600,000 to $598 in a single day. The team confirmed the breach on X, asked the attacker to make contact, and has published no post-mortem since.

The exploit did not arrive in isolation. Hours earlier, Secret Network lost $4.67 million in Axelar-bridged tokens through a validation flaw that had sat unpatched in deployed code since March 2023. A separate attack on Saga preceded both. When a vulnerability lives in production for two years without remediation, that is not bad luck; it is an operational posture. The pattern across Cosmos-linked chains resembles what played out in the early Ethereum bridge era, when cross-chain infrastructure was being stress-tested in production because there was no other way to test it, except Cosmos is doing this in 2025 with far fewer users and far less institutional tolerance for the results.

ATOM trades around $1.78, more than 96% below its 2021 peak, and that context matters for how quickly the ecosystem can absorb reputational damage like this.

The exits that began late last year accelerated the problem. Noble, Penumbra, Comdex, Kujira, Evmos, and others have either migrated or shut down entirely, leaving the ecosystem thinner precisely when it needs redundancy and active security review across chains. Cosmos Labs acquired Mintscan in June and opened a Seoul subsidiary to consolidate operations, and leadership has signaled a tokenomics redesign for ATOM. Those moves address governance and narrative. They do not patch smart contracts or fund audit pipelines for smaller chains building on the ecosystem’s infrastructure. Repeated exploits across Cosmos-linked protocols will complicate any institutional pitch, regardless of how the Hub itself is positioned.

Namada’s credibility was already under pressure before the exploit. ZachXBT flagged in August 2024 that the NAM token launched with 100% of supply unlocked at the token generation event, including the 18.5% team allocation and 32% investor share, and questioned what incentive remained to build when every participant could exit from day one. A protocol whose privacy pool holds $600,000 at the time of attack was not exactly a thriving network. The exploit confirmed the vulnerability; the token structure had already described the trajectory.