# Hacker unstaked my coins before the 20 days unstaking period **URL:** \ **Category:** Security\ **Created:** [July 23, 2025, 9:11pm UTC](https://forum.cosmos.network/t/hacker-unstaked-my-coins-before-the-20-days-unstaking-period/15853 "2025-07-23T21:11:42Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Zing](https://avatars.discourse-cdn.com/v4/letter/z/919ad9/32.png) [@Zing](https://forum.cosmos.network/u/Zing)\ **Post date:** [July 23, 2025, 9:11pm UTC](https://forum.cosmos.network/t/hacker-unstaked-my-coins-before-the-20-days-unstaking-period/15853/1 "2025-07-23T21:11:43Z")
Dear experts My wallet was compromised and the hacker unbounded my staking of cosmos on the exodus wallet before the 20 days unstaking period ended. How is that even possible? Somehow they minted a new coin called iAtom but the original atom actually were still staking. Do you know if these coins are being staked somewhere else or if it is completely lost. I am also interested on how they actually did that. I think you guys have the right technical knowledge. Is that a security issue or is it really possible to unstake before the 20days period? That is my wallet and it happened on 21 July. cosmos1g7wgd7pl25gv9sh2cjjluc6qk7tasdm25xhw5g Thanks for your knowledge and time ---
**Author:** ![Zing](https://avatars.discourse-cdn.com/v4/letter/z/919ad9/32.png) [@Zing](https://forum.cosmos.network/u/Zing)\ **Post date:** [July 23, 2025, 9:15pm UTC](https://forum.cosmos.network/t/hacker-unstaked-my-coins-before-the-20-days-unstaking-period/15853/2 "2025-07-23T21:15:40Z")
They used this /gaia.liquid.v1beta1.MsgTokenizeShares to mint the new iAtom tokens… ---
**Author:** ![cosmosrescue](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/cosmosrescue/32/7556_2.png) [@cosmosrescue](https://forum.cosmos.network/u/cosmosrescue)\ **Post date:** [July 24, 2025, 6:24am UTC](https://forum.cosmos.network/t/hacker-unstaked-my-coins-before-the-20-days-unstaking-period/15853/4 "2025-07-24T06:24:24Z")
hey, unfortunately your atom is gone, they used [liquid staking module](https://hub.cosmos.network/main/modules/liquid) - it allows to turn your staked atom into liquid atom instantly. it is a feature that can be disabled on the chain level, so for the future wallets you could consider disabling it if you are not actively using liquid staking. there are a few options for it: 1. through cli ```auto gaiad tx liquid disable-tokenize-shares ``` 2. through web apps - [https://cosmosrescue.com/cosmos-lsm](https://cosmosrescue.com/cosmos-lsm) - [https://app.moonkitt.com](https://app.moonkitt.com) we also have a telegram bot that would notify you if liquid staking was enabled on your wallet or if your atom got unstaked. you can see details [here](https://cosmosrescue.com/wallet-watchdog). ---
**Author:** ![reasonant](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/reasonant/32/7558_2.png) [@reasonant](https://forum.cosmos.network/u/reasonant)\ **Post date:** [July 24, 2025, 1:30pm UTC](https://forum.cosmos.network/t/hacker-unstaked-my-coins-before-the-20-days-unstaking-period/15853/5 "2025-07-24T13:30:02Z")
Incredibly stupid for atom to have this enabled by default. hub cant do a darn thing right. ---
**Author:** ![Tagu](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/tagu/32/6956_2.png) [@Tagu](https://forum.cosmos.network/u/Tagu)\ **Post date:** [July 24, 2025, 1:57pm UTC](https://forum.cosmos.network/t/hacker-unstaked-my-coins-before-the-20-days-unstaking-period/15853/6 "2025-07-24T13:57:55Z")
Sorry that you lost your fund Using this post to reiterate LSM should be set to OFF by default , and many members of the community think that way > [@\[ARCHIVED\] \[DRAFT\] Signalling prop to make LSM opt-in by default](https://forum.cosmos.network/t/proposal-draft-signalling-prop-to-make-lsm-opt-in-by-default/13769): > > Author Citadel One Background Last year, with [prop 790](https://www.mintscan.io/cosmos/proposals/790), the community has voted in favor of adopting the Liquid Staking Module. The objective of the LSM is to regulate liquid staking as well as increase its adoption by introducing the following features: Cap the amount of $ATOM that could be liquid staked. The initially cap proposed by the LSM is 25% of total $ATOM staked but could be modified by on-chain governance. Imposing a Validator self-bond requirement to receive delegations from LSD p… Re sharing my opinion : ![Capture d’écran 2025-07-24 à 15.52.15](https://canada1.discourse-cdn.com/flex031/uploads/cosmos1/original/2X/1/112847c47e3705bd2ac5abfa027eba7d540ef77f.png) The limitation at the time seemed to be that the implication of doing it, enable/disable it.. etc should be made at the user interface level, the wallet like Keplr, leap.. etc (which is kind of false considering cosmosrescue simple tool) Tagging @Mag We need to be more close to wallet integrator to push this kind of stuff The logical would be that LSM is disable by default, and if an experience user wants to activate it, he can do it directly from keplr. The LSM would be activate after a 21 days period (so if the case where a hacker do activate it without you consent, at least you get the same amount of time to counter it), then after that period he is free to use it as much as he wants. With off course in-app notification on when the feature is activate or disactivate. By the way, thank you CosmosRescue , I’m def gonna to disable it through your website, thank you for providing this as I have no clue how to use the cli commands 👍