Members of the Cosmos and Osmosis core teams have been conducting an extensive audit of IBC following the BSC exploit, during which a critical security flaw was discovered that affects all IBC-enabled Cosmos chain for all IBC versions. Steps have been taken to ensure that all major public chains that support IBC are patched.
Once 1/3 of the voting power is applied to a patch, there is no threat of a critical vulnerability. Once the official patch is released, the remaining 2/3 chains should still be patched as soon as possible. The public version of the patch will be released in CosmosSDK v0.45.9 and v0.46.3 within 24 hours at 14:00 UTC on October 14 (22:00 GMT on October 14). It is strongly recommended that all chains and validators upgrade to the newly released patch immediately. The patch can be deployed by validators alone without chain-stop upgrades, and should be applied as soon as possible.
