Neutron exploit analysis

What happened

On 22 September 2026, an attacker passed a governance proposal on Neutron, a Cosmos consumer chain that had been in maintenance mode since June, and used the resulting authority to drain an estimated $9.4 million from ten contracts operated by the Astroport and Drop applications running on the chain (OAK, The Cryptonomist). Roughly $1.8 million to $1.96 million was bridged to Ethereum before the chain pauses took effect. The rest was recovered by validators (Web3 Is Going Just Great).

The proposal that passed was titled "AIATO: AI Agent Takeover", and its text described an AI-agent research initiative. The proposal's payload was the actual mechanism: eleven MsgUpdateAdmin messages that reassigned the administrator of ten Astroport and Drop contracts to an attacker-controlled address. Once the tally closed at 02:24 UTC on 22 September and the proposal executed, the attacker migrated those contracts to malicious code carrying a withdraw_all function and emptied them within about 24 minutes (OAK).

The cheap vote

The decisive stake arrived in the final minutes of a three-day expedited vote. An account bought roughly 31.62 million NTRN for $20,199 in USDC and delegated it less than twelve minutes before the tally. With that delegation in place, the proposal passed with about 81.88% approval, clearing the 67% threshold the expedited track required (OAK, The Cryptonomist).

The cost-versus-control ratio is what the press fixated on: about $20,200 of NTRN purchased governance authority over $9.4 million in third-party contract assets. The Cryptonomist, citing GoPlus Security, put the staked NTRN securing the vote at roughly $113,000 in value at the time, against the contracts those votes could redirect.

The mechanism, and what it is

The bug is structural rather than a coding error. Neutron runs on wasmd, the Cosmos SDK module for CosmWasm contracts, and that framework lets chain-level governance execute a MsgUpdateAdmin instruction that rewrites a contract's designated administrator. In normal operation, the multisig wallets Astroport and Drop relied on for security were supposed to be the final authority over their contracts. They were not. Chain governance sat above them the entire time, and a proposal that could reassign a contract's administrator did not need to go anywhere near a multisig's signing threshold to take control of what that multisig was meant to protect (OAK).

This is the property that makes the incident sharper than the more common governance-treasury drain. A treasury drain hits a protocol's own DAO, with its own token holders. The Neutron attack hit applications that had no governance relationship with NTRN holders at all. Astroport and Drop users were exposed to a vote they had no stake in.

The response

Astroport warned users to withdraw liquidity within minutes of the proposal executing. Neutron's validators paused the chain, and the broader Cosmos Hub network followed within hours. The Cosmos Hub remained paused for approximately 24 hours and 48 minutes. On the first block after restart on 23 September, validators moved roughly 1.23 million ATOM (around $2.2 million at the time) from an attacker-linked wallet to a community-controlled recovery address (OAK). Web3 Is Going Great reported the figure as 1.73 million ATOM, reflecting a different snapshot.

GoPlus Security traced attacker-controlled addresses across Neutron, Cosmos Hub, Noble, Axelar, dYdX, and Osmosis, with linked addresses on Ethereum as well. The notional $9.4 million loss figure and the bridged-out $1.8 to $1.96 million figure are the most consistently reported. The exact recovery balance is the one accounting that has not closed (The Cryptonomist).

History

The OAK index flags the incident as the second "hostile-vote treasury drain" of the summer, after a July 2026 BonkDAO low-quorum treasury drain. The mechanism is the same, but the structural lesson is sharper here: the threat is not "a DAO with a thin token" but "every contract on a chain whose governance can reassign admins." On a CosmWasm chain, governance is the root admin of every contract, and the cost of owning every contract is the cost of passing one proposal. On Neutron in September, that cost was $20,199.