1 min read

Cosmos Hub Restarts After Neutron Governance Attack Drains $4.4 Million

Validators halted the network for nearly 25 hours and moved about 1.227 million ATOM from an attacker-linked address for planned recovery.

Mentioned assets
Emergency restart console in a quiet network operations room / TokenPost.ai
Emergency restart console in a quiet network operations room / TokenPost.ai

Cosmos Hub validators restarted the network after a nearly 25-hour halt linked to a manipulated Neutron governance proposal that enabled the theft of about $4.4 million in digital assets.

The attacker spent about 20,199 USDC to buy Neutron (NTRN) and staked 31.6 million NTRN roughly 12 minutes before voting closed. The proposal passed with 82% support and transferred control of 11 contracts to the attacker, which were then moved to malicious code.

Cosmos Hub validators coordinated the halt to help recover funds connected to the attack. During the restart, about 1.227 million Cosmos (ATOM) tokens moved from an address linked to the attacker to a newly created address.

The recovered ATOM is planned for return to its original holders. The incident involved Neutron, while the Cosmos Hub response focused on stopping the movement of assets that had reached the Hub.

Loading…