Verify a decision

{"actor":"system:backfill","investigation_id":"ac47d7bc-f668-41e1-b840-67a083d8ff15","kind":"publish","page_slug":"neutron-dao","published_at":"2026-10-06T20:04:32.278Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Neutron DAO","sections":[{"content":"On September 19, 2026, a proposal was filed on Neutron's expedited governance track titled \"AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration\" (referred to in some reporting simply as Proposal 9). The expedited track allowed a three-day vote requiring a 67% approval threshold. The proposal's payload contained 11 MsgUpdateAdmin messages, each naming the proposer's own address as the new administrator of the targeted contracts, framed publicly as research into letting AI agents operate a test network. On-chain data shows roughly 81.88% of votes cast were in favor when the tally was run on September 22. Ten of the eleven targeted contracts belonged to the Astroport decentralized exchange and the Drop liquid staking protocol; only the Astroport Treasury contract was left untouched. Once the proposal executed, the attacker used the newly granted admin rights to migrate the contracts to malicious bytecode (reported code ID 5399, containing a withdraw-all function) and drained them within approximately 24 minutes.","heading":"The Governance Proposal and Admin Takeover","severity":"critical","sources":[{"credibility":2,"name":"CryptoSlate: Neutron DAO passes a new proposal, and $9.3M in crypto disappears","type":"news_article","url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"},{"credibility":2,"name":"Cryptonomist: Neutron Governance Attack Exposes $9.4M Blockchain Exploit","type":"news_article","url":"https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/"}]},{"content":"Reporting indicates the attacker's address had initially cast a 'yes' vote while holding only about 100 NTRN tokens — an amount with negligible voting weight. Approximately 11–12 minutes before the voting period closed, the same address spent $20,199 (reported as USDC) to purchase roughly 31.6 million additional NTRN tokens, largely drawn from Astroport liquidity pools that were later drained, and staked them just in time to swing the tally before the proposal's vote closed. This gave the attacker effective control of the outcome at a token cost of roughly $0.00064 per NTRN. Commentary attributed to security researchers (including a figure described as \"Rarma\") estimated Neutron's entire bonded governance stake at only around $113,000 at the time — guarding contracts that collectively held approximately $9.4 million in assets, an imbalance of roughly 83:1 between the cost of the attack and the value it controlled.","heading":"Last-Minute Vote Manipulation and Attack Cost","severity":"critical","sources":[{"credibility":2,"name":"Cryptonomist: Neutron Governance Attack Exposes $9.4M Blockchain Exploit","type":"news_article","url":"https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/"},{"credibility":2,"name":"CryptoSlate: Neutron DAO passes a new proposal, and $9.3M in crypto disappears","type":"news_article","url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"}]},{"content":"Security trackers, including GoPlus Security and SlowMist, estimated combined losses of approximately $9.3–9.4 million, split roughly $4.9 million drained from Astroport-linked contracts and $4.4 million from Drop liquid staking contracts. Early reporting the day after the exploit (September 23) indicated roughly one-fifth of the total had already been moved beyond contracts secured by the subsequent network halts, with stolen assets traced moving across Neutron, Cosmos Hub, Noble, Axelar, dYdX, Osmosis, and Ethereum. One breakdown of funds that reached Cosmos Hub described roughly $3 million in ATOM, $1.2 million in USDC, about $100,000 in DYDX, and smaller amounts of wstETH and WETH among the bridged assets.","heading":"Financial Losses","severity":"critical","sources":[{"credibility":3,"name":"GoPlus Security exploit breakdown (X/Twitter)","type":"social_media","url":"https://x.com/GoPlusSecurity/status/2102737243760685263"},{"credibility":2,"name":"CryptoSlate: Neutron DAO passes a new proposal, and $9.3M in crypto disappears","type":"news_article","url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"},{"credibility":2,"name":"Protos: Cosmos Hub halts for 24 hours after Neutron governance attack","type":"news_article","url":"https://protos.com/cosmos-hub-halts-for-24-hours-after-neutron-governance-attack/"}]},{"content":"Unlike many DeFi exploits, the Neutron incident did not rely on a code vulnerability in the drained contracts themselves. Reporting attributes the root cause to Neutron's wasmd-based chain governance module, which allowed a passed governance proposal to execute MsgUpdateAdmin and reassign the administrator of any CosmWasm contract on the chain — overriding application-level multisig or timelock protections that developers had put in place, without requiring consent from the contracts' original teams. Because Neutron's bonded governance stake (on the order of $113,000) was far smaller than the value secured by contracts it had ultimate authority over (roughly $9.4 million), an attacker could economically justify buying enough tokens to pass a malicious proposal. Commentary described this as a structural governance-design flaw rather than a smart-contract bug.","heading":"Root Cause: Governance Could Override Contract Admin Controls","severity":"critical","sources":[{"credibility":2,"name":"Cryptonomist: Neutron Governance Attack Exposes $9.4M Blockchain Exploit","type":"news_article","url":"https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/"},{"credibility":2,"name":"CryptoSlate: Neutron DAO passes a new proposal, and $9.3M in crypto disappears","type":"news_article","url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"}]},{"content":"As stolen assets bridged from Neutron onto Cosmos Hub, validators representing more than one-third of voting power coordinated an emergency halt of the Hub at block height 33,086,740, beginning around 11:00–11:18 UTC on September 22, to prevent further outflow of stolen funds. The halt lasted approximately 24.5 hours, with normal block production resuming at 12:00 UTC on September 23 at block 33,086,741 after validators applied a patched binary (reported as v28.3.0) and executed a one-time state-level transfer. That transfer moved 1,227,121.37 ATOM (reported variously as roughly $2.1–2.2 million) from addresses associated with the attacker into a 4-of-6 validator-controlled multisig address, without the wallet owner's signature, pending a governance-authorized return process. The Cosmos Hub team stated the Hub itself was not exploited and that no Hub user funds were affected beyond the bridged, attacker-linked assets. Despite the halt, an estimated 500,000 ATOM had already been swapped to ETH via THORChain before the freeze, and a further 168,990.9 ATOM in THORChain refund was reportedly moved out by the attacker after the restart, before it could be secured. This is described in reporting as the first instance of a Cosmos parent chain halting specifically in response to a consumer-chain governance exploit.","heading":"Cosmos Hub Network Halt and Fund Interception","severity":"high","sources":[{"credibility":2,"name":"Cosmos Forum: Neutron Governance Attack: Cosmos Hub Response and Recovery Update","type":"official","url":"https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369"},{"credibility":2,"name":"Protos: Cosmos Hub halts for 24 hours after Neutron governance attack","type":"news_article","url":"https://protos.com/cosmos-hub-halts-for-24-hours-after-neutron-governance-attack/"},{"credibility":2,"name":"CryptoSlate: Cosmos intercepts 1.23 million stolen ATOM but refunds now wait on governance vote","type":"news_article","url":"https://cryptoslate.com/cosmos-intercepts-1-23-million-stolen-atom-but-refunds-now-wait-on-governance-vote/"}]},{"content":"Following the fund seizure, a Cosmos Hub governance proposal numbered 1056 — described in reporting as an \"ATOM Refund & Justice Bounty\" — was submitted seeking to return the seized 1,227,121 ATOM to the attacker's wallet, while also offering a 500,000 ATOM bounty to voters who supported it. Cosmos Hub voters rejected the proposal overwhelmingly: reporting put the \"NoWithVeto\" vote at approximately 94.64%–95% of roughly 69.3 million ATOM cast, versus only about 174,300 ATOM in favor. NoWithVeto is the strongest rejection mechanism available in Cosmos governance. As of the most recent reporting reviewed, a formal process for returning recovered funds to the originally affected Astroport and Drop users remained pending further Neutron and Cosmos Hub governance action.","heading":"Attacker's Refund Proposal Rejected by Cosmos Hub Voters","severity":"medium","sources":[{"credibility":2,"name":"CryptoBriefing: Cosmos Hub proposal for ATOM refund faces 95% veto vote","type":"news_article","url":"https://cryptobriefing.com/cosmos-hub-atom-refund-veto-vote/"},{"credibility":2,"name":"Unchained: Cosmos Hub voters are vetoing a proposal to refund the Neutron attacker 1.2 million ATOM","type":"news_article","url":"https://unchainedcrypto.com/cosmos-hub-voters-are-vetoing-a-proposal-to-refund-the-neutron-attacker-1-2-million-atom/"}]},{"content":"Reporting on the Neutron governance exploit noted it was the third notable Cosmos ecosystem security incident in recent months, following a bug in the Cosmos EVM module reported in August 2026 and a Nomic bridge exploit reported around June 25, 2026. This context is cited by commentators as part of a broader pattern of security pressure on Cosmos-based chains, though each incident involved a distinct root cause.","heading":"Broader Pattern of Cosmos Ecosystem Incidents","severity":"low","sources":[{"credibility":2,"name":"Protos: Cosmos Hub halts for 24 hours after Neutron governance attack","type":"news_article","url":"https://protos.com/cosmos-hub-halts-for-24-hours-after-neutron-governance-attack/"}]}],"sources_used":[{"credibility":2,"name":"Cryptonomist: Neutron Governance Attack Exposes $9.4M Blockchain Exploit","type":"news_article","url":"https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/"},{"credibility":2,"name":"CryptoSlate: Neutron DAO passes a new proposal, and $9.3M in crypto disappears","type":"news_article","url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"},{"credibility":2,"name":"Cosmos Forum: Neutron Governance Attack: Cosmos Hub Response and Recovery Update","type":"official","url":"https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369"},{"credibility":3,"name":"GoPlus Security exploit breakdown (X/Twitter)","type":"social_media","url":"https://x.com/GoPlusSecurity/status/2102737243760685263"},{"credibility":2,"name":"Protos: Cosmos Hub halts for 24 hours after Neutron governance attack","type":"news_article","url":"https://protos.com/cosmos-hub-halts-for-24-hours-after-neutron-governance-attack/"},{"credibility":2,"name":"CryptoSlate: Cosmos intercepts 1.23 million stolen ATOM but refunds now wait on governance vote","type":"news_article","url":"https://cryptoslate.com/cosmos-intercepts-1-23-million-stolen-atom-but-refunds-now-wait-on-governance-vote/"},{"credibility":2,"name":"CryptoBriefing: Cosmos Hub proposal for ATOM refund faces 95% veto vote","type":"news_article","url":"https://cryptobriefing.com/cosmos-hub-atom-refund-veto-vote/"},{"credibility":2,"name":"Unchained: Cosmos Hub voters are vetoing a proposal to refund the Neutron attacker 1.2 million ATOM","type":"news_article","url":"https://unchainedcrypto.com/cosmos-hub-voters-are-vetoing-a-proposal-to-refund-the-neutron-attacker-1-2-million-atom/"}],"summary":"On September 22, 2026, an attacker used Neutron's on-chain governance system to seize administrative control of 10 smart contracts across the Astroport decentralized exchange and the Drop liquid staking protocol, draining an estimated $9.3–9.4 million within roughly 24 minutes of the malicious proposal's execution. The attacker spent only $20,199 to acquire enough NTRN tokens to pass the proposal, exploiting a structural gap between Neutron's low bonded governance stake and the much larger value secured by contracts governance could control, rather than a conventional smart-contract bug. The incident forced Cosmos Hub validators into an approximately 24-to-25-hour network halt — described as the first time a parent chain has halted because of a consumer-chain governance exploit — to intercept and freeze bridged funds, a portion of which has since been recovered to a validator multisig pending a governance-approved return process.","timeline":[{"date":"2026-09","date_original":"2026-09-19","event":"A governance proposal titled 'AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration' (Proposal 9) is filed on Neutron's expedited governance track, containing 11 MsgUpdateAdmin messages naming the proposer's address as administrator of Astroport and Drop contracts.","source":"CryptoSlate / Cryptonomist","source_url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"},{"date":"2026-09-22","date_evidence":"On-chain data shows 81.88% voted yes when the tally was run at 02:24 UTC on Sept. 22.","event":"Proposal 9 passes with approximately 81.88% approval after the attacker purchases 31.6 million NTRN tokens roughly 11-12 minutes before the vote closes, having spent $20,199 to do so.","source":"Cryptonomist","source_url":"https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/"},{"date":"2026-09","date_original":"2026-09-22","event":"The attacker uses admin control to migrate 10 Astroport and Drop contracts to malicious bytecode and drains them within approximately 24 minutes, for an estimated $9.3-9.4 million in combined losses.","source":"CryptoSlate / GoPlus Security","source_url":"https://cryptoslate.com/neutron-dao-passes-a-new-proposal-and-9-3m-in-crypto-disappears/"},{"date":"2026-09","date_original":"2026-09-22","event":"Cosmos Hub validators halt the network at block height 33,086,740, roughly 11:00-11:18 UTC, to prevent further outflow of stolen funds bridged from Neutron.","source":"Cosmos Forum recovery update","source_url":"https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369"},{"date":"2026-09","date_evidence":"Restart: September 23, 12:00 UTC at block 33,086,741","date_original":"2026-09-23","event":"Cosmos Hub resumes block production after roughly 24.5 hours, having applied a patched binary and transferred 1,227,121.37 ATOM from attacker-linked addresses to a 4-of-6 validator multisig.","source":"Cosmos Forum recovery update","source_url":"https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369"},{"date":"2026-09","event":"Cosmos Hub Proposal 1056, an 'ATOM Refund & Justice Bounty' proposal seeking to return the seized 1.2 million ATOM to the attacker's wallet with a bounty for supporting voters, is submitted and rejected with roughly 94.64-95% of votes cast as 'NoWithVeto'.","source":"CryptoBriefing / Unchained","source_url":"https://cryptobriefing.com/cosmos-hub-atom-refund-veto-vote/"}]},"v":1}