# Cosmos Hub Restarts After Neutron Governance Attack Drains $4.4 Million

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/23524
Published: 2026-09-24T02:32:11.000Z
Updated: 2026-09-24T02:32:11.000Z

Cosmos Hub validators restarted the network after a nearly 25-hour halt linked to a manipulated Neutron governance proposal that enabled the theft of about $4.4 million in digital assets.

The attacker spent about 20,199 USDC to buy Neutron (NTRN) and staked 31.6 million NTRN roughly 12 minutes before voting closed. The proposal passed with 82% support and transferred control of 11 contracts to the attacker, which were then moved to malicious code.

Cosmos Hub validators coordinated the halt to help recover funds connected to the attack. During the restart, about 1.227 million Cosmos (ATOM) tokens moved from an address linked to the attacker to a newly created address.

The recovered ATOM is planned for return to its original holders. The incident involved Neutron, while the Cosmos Hub response focused on stopping the movement of assets that had reached the Hub.