Astroport

Cosmos

Neutron

THORChain

<h2 id="span-style-font-size-16px-color-inherit-font-weight-bolder-cosmos-hub-neut-span-span-style-font-size-16px-color-inherit-font-weight-bolder-span-span-style-font-size-16px-color-inherit-font-weight-bolder-span-span-style-font-size-16px-color-inherit-font-weight-bolder-ron-attack-validators-recover-1-2m-atom-span">Cosmos Hub Neutron Attack: Validators Recover 1.2M ATOM</h2>
The <a href="https://www.coingabbar.com/en/crypto-currency-news/cosmos-evm-hack-572-million-crypto-exploit-news" rel="noopener noreferrer nofollow">Cosmos Hub</a> Neutron attack unfolded on September 22, 2026, when an attacker exploited a governance proposal on Neutron to seize admin control over Astroport contracts and other protocols.&nbsp;
Per <a href="https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369" rel="noopener noreferrer nofollow">Cosmos Labs' official</a> Cosmos Forum update, dated September 25, roughly 1.73 million ATOM tied to the exploit reached the Cosmos Hub. The Hub itself was not compromised, and no user funds were affected.&nbsp;
Here is the Cosmos Hub Neutron attack explained in full, as of September 26, 2026.
<h2 id="span-span-style-font-size-16px-what-triggered-the-neutron-governance-exploit-span-span">What Triggered the Neutron Governance Exploit?</h2>
The attacker executed a malicious proposal on Neutron between roughly 2:25 AM and 7:44 AM UTC on September 22.&nbsp;
This Neutron governance exploit gave admin level access to Astroport contracts, triggering an Astroport liquidity drain and Astroport exploit hack across other protocols before Neutron validators halted their own network.&nbsp;
The attacker had already begun moving stolen ATOM via the $ATOM cross-chain bridge to the Hub.
<h2 id="span-span-style-font-size-16px-how-much-atom-was-stolen-in-neutron-hack-span-span">How Much ATOM Was Stolen in Neutron Hack?</h2>
<div>
 <table>
 <colgroup>
 <col width="306">
 <col width="171">
 <col width="157">
 </colgroup>
 <tbody>
 <tr>
 <td>Category</td>
 <td>Amount (ATOM)</td>
 <td>Status</td>
 </tr>
 <tr>
 <td>Total bridged to Cosmos Hub</td>
 <td>~1,730,000</td>
 <td>Tracked on-chain</td>
 </tr>
 <tr>
 <td>THORChain ATOM swap to ETH before halt</td>
 <td>~500,000</td>
 <td>Not recoverable</td>
 </tr>
 <tr>
 <td>Refunded to attacker post-restart</td>
 <td>168,990.9</td>
 <td>Moved out, lost</td>
 </tr>
 <tr>
 <td>Recovered into Hub multisig</td>
 <td>1,227,121</td>
 <td>Secured</td>
 </tr>
 </tbody>
 </table>
</div>
This $ATOM multisig recovery news confirms Cosmos recovers 1.2 million $ATOM, the biggest recoverable share, marking a fast Cosmos Hub $ATOM recovery.
<h2 id="span-span-style-font-size-16px-cosmos-hub-chain-halt-and-recovery-timeline-span-span">Cosmos Hub Chain Halt and Recovery Timeline</h2>
This Cosmos Hub Neutron attack timeline shows how fast validators moved:
<ul>
 <li style="margin-left: 0px; list-style-type: disc">Sept 22, ~11:18 UTC: Cosmos Hub validators halted the network at block 33,086,740.</li>
 <li style="margin-left: 0px; list-style-type: disc">Sept 22, ~19:50 UTC: The patched Cosmos Hub v28.3.0 upgrade was built and distributed.</li>
 <li style="margin-left: 0px; list-style-type: disc">Sept 23, 12:00 UTC: Blocks resumed after over two thirds of voting power confirmed the patch.</li>
 <li style="margin-left: 0px; list-style-type: disc">Sept 23, 12:06 UTC: 1,227,121 $ATOM moved into the Cosmos Hub recovery multisig held by Nansen, Keplr, Enigma, Silknodes, Kiln, and Polkachu.</li>
</ul>
Who hacked Neutron Astroport remains unconfirmed, though the attacker's address has been flagged to more than 30 exchanges and bridges.
Crypto news account <a href="https://x.com/wublockchain12/status/2103549227200827784" rel="noopener noreferrer nofollow">Wu Blockchain also covered</a> this Neutron governance attack in a tweet shortly after the official update went live, citing matching recovery figures.<img alt="Wublockchain official tweet" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/Nv4jXItV8VtNBVn8IdsXlEgGXRocEamjBTAGV7Ri.png" width="300" title="Wublockchain official tweet">
<h2 id="span-span-style-font-size-16px-atom-price-after-cosmos-hub-attack-span-span">ATOM Price After Cosmos Hub Attack</h2>
$ATOM price today stands near $8.90, up over 2.5% in 24 hours. The attack initially raised concerns for Hub liquidity, but the recovery appears to have supported short term sentiment.&nbsp;
Any <a href="https://www.coingabbar.com/en/price-prediction/cosmos-price-prediction-atom-global-update-25-key-target" rel="noopener noreferrer nofollow">ATOM price prediction</a> beyond this remains speculative and unconfirmed.
<h2 id="span-span-style-font-size-16px-cosmos-hub-halt-atom-safe-or-not-span-span">Cosmos Hub Halt $ATOM Safe or Not?</h2>
Cosmos Hub blockchain security was not breached; the halt was a precaution against further outflows, not a Gaia flaw.&nbsp;
Exchanges resumed deposits and withdrawals normally, and the Neutron NTRN token stabilized as Neutron relaunched with mitigations. This Neutron NTRN hack update confirms the network is stable.
<h2 id="span-span-style-font-size-16px-what-happens-next-span-span">What Happens Next?</h2>
The 1,227,121 $ATOM stays in the multisig until Cosmos Hub governance passes a proposal authorizing its return. This Cosmos Hub Neutron attack recovery depends on that approval.&nbsp;
The Neutron recovery team, including Solva, Astroport, and Drop, is expected to submit the proposal in the coming days.
<h2 id="span-span-style-font-size-16px-expert-opinion-span-span">Expert Opinion</h2>
Analysts tracking this Cosmos Hub Neutron hack latest update call it one of the faster validator coordinated recoveries in recent <a href="https://www.coingabbar.com/en/crypto-news-now-september-26-bitcoin-ethereum-price-today" rel="noopener noreferrer nofollow">crypto news today</a>.&nbsp;
The 24 hour halt and supermajority patch show validators can act fast, <a href="https://www.coingabbar.com/en/crypto-currency-news/thorchain-trading-live-again-rune-recovery-monero-swap-soon" rel="noopener noreferrer nofollow">though THORChain</a> losses expose limits once funds leave one chain.&nbsp;
This Neutron governance attack ATOM recovery news could shape future Cosmos emergency plans. For more Cosmos Hub news today and <a href="https://www.coingabbar.com/en/crypto-news-english" rel="noopener noreferrer nofollow">crypto news</a>, follow official channels.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency markets are volatile; readers should do independent research before making investment decisions.

Cosmos Hub Neutron Attack Shocker: 1.2M ATOM Saved

Table of Contents

Coingabbar

Other articles published on Sep 26, 2026

OpenAI says the full scope of agent activity could take months to establish

The GENIUS Act Will Amplify XRP’s Use Case, Expert Presents Proof

ENA keeps climbing after Ethena's Binance stock deal

Chainlink’s Market Movements and Prospects Unveiled

One Crossing Took Fourteen Minutes, Another Took Nearly Nineteen Hours

Shiba Inu trading activity jumps 351%, tests 200-day moving average

Join our free newsletter for daily crypto updates!