Hacker unstaked my coins before the 20 days unstaking period
Dear experts
My wallet was compromised and the hacker unbounded my staking of cosmos on the exodus wallet before the 20 days unstaking period ended. How is that even possible? Somehow they minted a new coin called iAtom but the original atom actually were still staking. Do you know if these coins are being staked somewhere else or if it is completely lost. I am also interested on how they actually did that. I think you guys have the right technical knowledge.
Is that a security issue or is it really possible to unstake before the 20days period?
That is my wallet and it happened on 21 July.
cosmos1g7wgd7pl25gv9sh2cjjluc6qk7tasdm25xhw5g
Thanks for your knowledge and time
They used this /gaia.liquid.v1beta1.MsgTokenizeShares
to mint the new iAtom tokens…
hey, unfortunately your atom is gone,
they used liquid staking module - it allows to turn your staked atom into liquid atom instantly.
it is a feature that can be disabled on the chain level, so for the future wallets you could consider disabling it if you are not actively using liquid staking.
there are a few options for it:
- through cli
gaiad tx liquid disable-tokenize-shares - through web apps
we also have a telegram bot that would notify you if liquid staking was enabled on your wallet or if your atom got unstaked. you can see details here.
Incredibly stupid for atom to have this enabled by default. hub cant do a darn thing right.
Sorry that you lost your fund Using this post to reiterate LSM should be set to OFF by default , and many members of the community think that way [ARCHIVED] [DRAFT] Signalling prop to make LSM opt-in by default Hub Proposals Author Citadel One Background Last year, with prop 790 , the community has voted in favor of adopting the Liquid Staking Module. The objective of the LSM is to regulate liquid staking as well as increase its adoption by introducing the following features: Cap the amount of $ATOM that could be liquid staked. The initially cap proposed by the LSM is 25% of total $ATOM staked but could be modified by on-chain governance. Imposing a Validator self-bond requirement to receive delegations from LSD p… Re sharing my opinion : Capture d’écran 2025-07-24 à 15.52.15 2110×540 55 KB The limitation at the time seemed to be that the implication of doing it, enable/disable it.. etc should be made at the user interface level, the wallet like Keplr, leap.. etc (which is kind of false considering cosmosrescue simple tool) Tagging @Mag We need to be more close to wallet integrator to push this kind of stuff The logical would be that…
Excerpt (1199 of 1794 characters). Read the whole post on the forum ↗