Cosmos Hub Secures 1.23 Million ATOM Pending Governance Vote
The funds are held in a four-of-six multisig and cannot be distributed until a Neutron recovery plan and Hub authorization are completed.
Cosmos Hub validators secured 1,227,121.37 Cosmos (ATOM) tied to the Sept. 22 Neutron governance attack, but the funds cannot be distributed until a recovery plan is completed and Hub governance authorizes the transfer.
The ATOM moved at about 8:06 a.m. ET (12:06 UTC) on Sept. 23 into a four-of-six recovery multisig controlled by Nansen, Keplr, Enigma, Silknodes, Kiln and Polkachu. Validators restarted the Hub at 8 a.m. ET (12:00 UTC) that day after deploying Gaia v28.3.0 and applying a one-time state change to the attacker-linked balance.
A Sept. 26 balance check recorded 1,227,121.374688 ATOM in the recovery address and no passed Hub mandate authorizing its transfer. Neutron contributors and affected protocols are preparing the recovery plan, but the materials do not establish when distributions will begin or whether all losses will be reimbursed.
Roughly 1.7 million ATOM reached the Hub from Neutron. About 500,000 ATOM had already moved through THORChain before the halt, while another 168,990.9 ATOM reached the attacker-linked address after the restart and was moved out. The Cosmos Hub itself was not exploited, and no Hub user funds were affected.
