The Cosmos Hub Neutron attack unfolded on September 22, 2026, when an attacker exploited a governance proposal on Neutron to seize admin control over Astroport contracts and other protocols.
Per Cosmos Labs' official Cosmos Forum update, dated September 25, roughly 1.73 million ATOM tied to the exploit reached the Cosmos Hub. The Hub itself was not compromised, and no user funds were affected.
Here is the Cosmos Hub Neutron attack explained in full, as of September 26, 2026.
The attacker executed a malicious proposal on Neutron between roughly 2:25 AM and 7:44 AM UTC on September 22.
This Neutron governance exploit gave admin level access to Astroport contracts, triggering an Astroport liquidity drain and Astroport exploit hack across other protocols before Neutron validators halted their own network.
The attacker had already begun moving stolen ATOM via the $ATOM cross-chain bridge to the Hub.
Category | Amount (ATOM) | Status |
Total bridged to Cosmos Hub | ~1,730,000 | Tracked on-chain |
THORChain ATOM swap to ETH before halt | ~500,000 | Not recoverable |
Refunded to attacker post-restart | 168,990.9 | Moved out, lost |
Recovered into Hub multisig | 1,227,121 | Secured |
This $ATOM multisig recovery news confirms Cosmos recovers 1.2 million $ATOM, the biggest recoverable share, marking a fast Cosmos Hub $ATOM recovery.
This Cosmos Hub Neutron attack timeline shows how fast validators moved:
Sept 22, ~11:18 UTC: Cosmos Hub validators halted the network at block 33,086,740.
Sept 22, ~19:50 UTC: The patched Cosmos Hub v28.3.0 upgrade was built and distributed.
Sept 23, 12:00 UTC: Blocks resumed after over two thirds of voting power confirmed the patch.
Sept 23, 12:06 UTC: 1,227,121 $ATOM moved into the Cosmos Hub recovery multisig held by Nansen, Keplr, Enigma, Silknodes, Kiln, and Polkachu.
Who hacked Neutron Astroport remains unconfirmed, though the attacker's address has been flagged to more than 30 exchanges and bridges.
Crypto news account Wu Blockchain also covered this Neutron governance attack in a tweet shortly after the official update went live, citing matching recovery figures.
$ATOM price today stands near $8.90, up over 2.5% in 24 hours. The attack initially raised concerns for Hub liquidity, but the recovery appears to have supported short term sentiment.
Any ATOM price prediction beyond this remains speculative and unconfirmed.
Cosmos Hub blockchain security was not breached; the halt was a precaution against further outflows, not a Gaia flaw.
Exchanges resumed deposits and withdrawals normally, and the Neutron NTRN token stabilized as Neutron relaunched with mitigations. This Neutron NTRN hack update confirms the network is stable.
The 1,227,121 $ATOM stays in the multisig until Cosmos Hub governance passes a proposal authorizing its return. This Cosmos Hub Neutron attack recovery depends on that approval.
The Neutron recovery team, including Solva, Astroport, and Drop, is expected to submit the proposal in the coming days.
Analysts tracking this Cosmos Hub Neutron hack latest update call it one of the faster validator coordinated recoveries in recent crypto news today.
The 24 hour halt and supermajority patch show validators can act fast, though THORChain losses expose limits once funds leave one chain.
This Neutron governance attack ATOM recovery news could shape future Cosmos emergency plans. For more Cosmos Hub news today and crypto news, follow official channels.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency markets are volatile; readers should do independent research before making investment decisions.