Cosmos Hub Resumes Operations After 25-Hour Shutdown Following Governance Exploit

The Cosmos Hub has resumed normal operations after a 25-hour emergency shutdown aimed at preventing a governance attacker from transferring approximately 1.2 million ATOM tokens, valued at over $2.2 million, from the network. The coordinated halt began on September 22, 2026, at block height 33086740 and concluded at 12:00 UTC on September 23, 2026. During this period, validators successfully moved the stolen tokens out of the attacker's wallet, mitigating further losses.

The exploit originated from Neutron, a smart contract platform within the Cosmos ecosystem, where an attacker utilized a governance proposal to gain control over two applications, Astroport and Drop. The initial investment for the attacker was about $20,200 in NTRN tokens, but the potential payout was significantly higher, with around $9.5 million in contracts at risk. The attacker managed to siphon off roughly 20% of the exposed contract values before Neutron halted its operations, leaving about $5 million in assets trapped.

The decision to halt the Cosmos Hub was critical, as allowing the chain to continue running could have enabled the attacker to transfer or swap the stolen ATOM tokens, complicating recovery efforts. Fortunately, no user funds on the Cosmos Hub were lost during this incident, as the affected assets were solely linked to the Neutron exploit. This incident marks the third significant security event in the Cosmos ecosystem in recent months, highlighting ongoing vulnerabilities related to governance attacks, which exploit system rules rather than code flaws.

The response from Cosmos Hub validators has been commended by security researchers for its effectiveness in coordinating a network halt and executing a recovery operation. This incident underscores the importance of governance security within the Cosmos ecosystem, as vulnerabilities can quickly escalate across interconnected platforms, necessitating immediate and decisive action to protect assets.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News