Security researcher Doyeon Park has disclosed a 0-day vulnerability in the Cosmos consensus layer (CometBFT), with a CVSS score of 7.1 (high risk). This vulnerability could cause Cosmos network nodes supporting over $8 billion in assets to stall during block synchronization, but it does not directly lead to asset theft. The relevant technical details have been published on GitHub, but the researcher has not yet released the full attack code. Doyeon Park stated that due to the Cosmos team’s lack of cooperation in handling the issue—including refusing to publicly report it, marking their HackerOne report as spam, and violating international standards by downgrading the severity of the vulnerability—he decided to disclose it publicly after multiple unsuccessful attempts at communication.