A governance attack on Neutron turned a relatively small voting-capital outlay into administrative control over contracts holding millions of dollars of user assets.
The incident then spread beyond Neutron itself. Validators halted the Cosmos Hub for nearly 25 hours to prevent stolen ATOM from moving farther, and the first block after restart moved approximately 1,227,121 ATOM out of the attacker-linked wallet through the restart/recovery process rather than a normal wallet-signed transaction.
What happened on Neutron
Neutron proposal 9 was titled “AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration.”
The proposal went through Neutron’s expedited governance track. Its public framing referred to an AI-agent experiment, but the executable content contained 11 messages that transferred administrative control over Neutron contracts to the proposer-controlled address.
Ten of those contracts were associated with Astroport and Drop. After the vote passed, contract code/admin control was changed and assets were drained.
How much governance power was acquired?
On-chain analysis cited in current reporting says the address responsible for most of the “yes” voting power acquired approximately 31.6 million NTRN for roughly 20,199 USDC and staked it less than 12 minutes before voting closed.
The proposal passed with roughly 82% of votes cast in favor.
The core design failure was the mismatch between the cost of decisive governance power and the value of contracts governance could administer.
Gross attack path: about $9.4–$9.5 million
Current reconstructions place approximately $4.9 million associated with Astroport and $4.4 million associated with Drop inside the attack path.
CEXVia treats the combined $9.4–$9.5 million as gross affected/drained value, not final realized attacker profit.
Reporting indicates only around one-fifth escaped before chain halts and containment actions trapped or recovered the rest.
Why Neutron halted
Neutron stopped producing blocks as a containment measure.
Halting prevented additional execution, transfers, swaps and bridging. It also froze legitimate users and application activity.
In the latest reporting reviewed for September 24, Neutron had not yet returned to normal production.
Why Cosmos Hub halted
The attacker moved a large amount of stolen ATOM from Neutron into Cosmos Hub.
Cosmos Hub validators deliberately halted block production to stop approximately 1.2 million ATOM from being transferred, swapped or bridged farther.
The Hub was offline for nearly 25 hours.
This is an important entity boundary: Cosmos Hub itself was not the exploited protocol.
Restart and 1,227,121 ATOM movement
Cosmos Hub restarted at approximately 12:00 UTC on September 23 after halting at block height 33,086,740.
The first block after restart moved 1,227,121 ATOM from the attacker-linked wallet to a new address. Reporting says the movement appeared through block/restart events rather than a normal transaction signed by the wallet owner.
That materially improves recovery prospects but creates governance/finality questions around emergency state intervention and custody of recovered funds.
Returned THORChain funds
Shortly after restart, an unfilled portion of an attacker-initiated THORChain swap was returned to the Cosmos Hub address.
Current reporting places the returned amount at approximately 168,991 ATOM.
Final recovery accounting remains incomplete.
Governance can override application governance
Users may assume Astroport governance controls Astroport contracts and Drop governance controls Drop contracts.
But if chain-level governance retains admin/migration authority over deployed application contracts, that higher-level governance can override application governance.
The Neutron proposal reportedly exercised exactly that kind of authority.
Security reviews therefore need to include:
- ultimate contract admin;
- chain-governance migration powers;
- expedited proposal scope;
- voting-power concentration;
- stake-age requirements;
- execution timelocks;
- application-level veto rights.
Why expedited governance increased risk
Short voting windows can be useful for emergencies, but dangerous when high-impact admin actions can execute immediately.
Better designs can separate pause powers from treasury/admin powers and impose longer timelocks or stronger quorum requirements for third-party application migrations.
User and protocol impact
Affected Astroport/Drop users face asset-recovery uncertainty, chain inaccessibility, liquidity withdrawal pressure and cross-chain settlement risk.
Astroport advised users in current reporting to withdraw liquidity across chains until further notice.
Users elsewhere in Cosmos also experienced the externality of the Hub halt despite the Hub not being exploited.
Evidence Status
Confirmed / Hub and Current Reporting
- Governance attack originated on Neutron.
- Cosmos Hub itself was not exploited.
- Hub halted nearly 25 hours.
- Hub restarted September 23 around 12:00 UTC.
- Approximately 1,227,121 ATOM moved from the attacker-linked wallet during recovery.
- Neutron remained halted in the latest reporting.
On-chain / Security Analysis
- Proposal contained 11 admin-control messages.
- Ten Astroport/Drop contracts were migrated/drained.
- ~31.6M NTRN acquired for ~20,199 USDC.
- Stake entered shortly before vote close.
- Gross attack-path value ~ $9.4–$9.5M.
- ~168,991 ATOM returned from an unfilled THORChain flow.
Developing
- Final realized loss.
- Exact recovery percentage.
- Recovery-address control.
- Neutron restart.
- Astroport/Drop reimbursement.
- Governance-rule remediation.
Risk Assessment
Critical.
The event shows a failure mode where governance voting power becomes equivalent to contract-admin compromise, with consequences severe enough to halt two blockchain environments.
What to Watch Next
Neutron restart, final contract inventory, recovered-asset custody, attacker outflows, reimbursement, stake/vote-rule changes, execution timelocks and redesign of application-admin authority.
FAQ
Was Cosmos Hub hacked?
No. Current Hub statements say the Hub itself was not exploited.
How much value was affected?
Current estimates place roughly $9.4–$9.5M in the Neutron attack path; final realized loss is not yet established.
How much ATOM was moved during recovery?
Approximately 1,227,121 ATOM.
Did the attacker spend only about $20K on governance power?
On-chain analysis cited in current reporting says approximately 31.6M NTRN was acquired for about 20,199 USDC shortly before the vote closed.
Why did Cosmos Hub halt?
To contain stolen ATOM that had moved from Neutron and prevent further transfers/swaps.
Is Neutron back online?
In the latest reporting reviewed for this update, Neutron remained halted.