Cosmos Hub Resumes After 25-Hour Halt, Validators Recover 1.227M ATOM Tied to Neutron Governance Exploit
AI Market Summary
Cosmos Hub resumed block production after a ~25-hour halt triggered by a Neutron governance attack, then moved ~1.227M ATOM from attacker-linked addresses to facilitate restitution. THORChain also returned ~169k ATOM tied to unexecuted swaps. While recovery actions reduce immediate loss realization, the incident highlights governance and smart-contract privilege risks across the Cosmos stack, likely increasing near-term risk premia for ATOM and related DeFi venues.
Impact level
● High
Affected assets
ATOM/USDT-7.47%
AI Insight · ATOM/USDTAI Insight
● Neutral
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
Cosmos Hub validator nodes suspended block production for nearly 25 hours after a governance-related attack on Neutron, with the chain halting around block height 33,086,740, according to ME News. Block production resumed at 20:00 Beijing time on Sept. 23.
After the restart, validators moved roughly 1.227 million ATOM—worth about $2.1 million—from addresses linked to the attacker to a new address, saying the funds are intended to be returned to their original owners.
The incident stemmed from a Neutron accelerated governance proposal that allowed the attacker to obtain administrative control over contracts connected to Astroport and Drop, putting about $9.4 million in assets at risk.
Roughly one minute after Cosmos Hub came back online, the THORChain treasury returned around 169,000 ATOM from the attacker's previously unexecuted swaps. A later attempt by the attacker to send about 500,000 ATOM to Osmosis failed due to insufficient balance. (Source: Foresight News)
