Cosmos Labs under fire over disclosure of bug affecting four blockchains