Cosmos Hub validators halted the network for nearly 25 hours, then restarted and moved about $2.1 million in ATOM out of a wallet tied to a Neutron governance drain — in the first block after the chain came back. The proposal that opened the door was titled like an AI experiment. The drain was ordinary DeFi governance failure with a very modern label.
Desk coverage from Unchained (Sep 23) and TokenPost lines up on the halt length, the restart window, the first-block ATOM move, and the Neutron proposal that started it.
What Happened on Restart
Cosmos Hub resumed producing blocks on Wednesday morning, September 23, 2026, after validators halted the network for nearly 25 hours. The Cosmos Hub account had scheduled the restart for 12:00 UTC / 8:00 a.m. ET. TokenPost puts the halt stop at block height 33,086,740.
In the first block committed after the restart, 1,227,121 ATOM — worth about $2.1 million — moved out of a wallet holding proceeds from the Neutron attack into a newly created address. Unchained and TokenPost both note the transfer appears without a transaction signed by the wallet’s owner. Cosmos Hub’s restart notice said the Hub itself “was not exploited and no funds were impacted apart from the assets moved from Neutron.”
Just over a minute after the restart, Unchained reports, a THORChain vault returned 168,991 ATOM (about $294,000) — the unfilled part of a 200,000-ATOM swap submitted before the halt. About two minutes later, the attacker tried to send 500,000 ATOM to Osmosis and failed for insufficient funds.
The Neutron Vote That Opened the Door
The starting point was Neutron proposal 9, titled “AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration.” It ran on Neutron’s expedited track, which allows a three-day vote. It passed when voting closed at about 10:24 p.m. ET Monday, with roughly 82% of votes cast in favor, according to the on-chain record cited by Unchained.
The proposal summary described an experiment in which “Autonomous AI agents will take operational control of a live testnet.” The proposal itself carried 11 messages that handed admin control of Neutron contracts to the proposer’s own address. That is the verified mechanism — a governance payload — not proof that autonomous AI agents executed the drain.
On-chain analysis published by X user Rarma and reported by Unchained says 10 of those 11 contracts belonged to the decentralized exchange Astroport and the liquid staking protocol Drop. Rarma wrote that the account carrying most of the yes vote bought about 31.6 million NTRN with 20,199 USDC and staked it less than 12 minutes before voting closed. The vote, Rarma wrote, “overrode two protocols’ own governance, on contracts the chain did not own.” After it passed, the attacker swapped the code of 10 of the 11 contracts and emptied them in less than half an hour, taking tokens Rarma valued at about $9.4 million. About $1.96 million of that still sat on chains that were still running at the time of the analysis. TokenPost’s frame puts exposure around $9.4–$9.5 million.
Neutron Still Halted
Neutron has not produced a block since 3:43 a.m. ET Tuesday, according to its public nodes as cited by Unchained. Former Neutron contributor Spaydh posted that the chain “was halted to prevent further harm.” Astroport told users on X to “withdraw your liquidity from Astroport on all chains until further notice.” Unchained also notes Neutron moved into a long-term maintenance phase in June — context for why an expedited track on a quieter chain mattered this week.
Jamoraquai Take
When an expedited “AI agent takeover” vote buys its quorum minutes before close and drains two protocols’ contracts the chain did not own, the story is governance design on a maintenance-mode consumer chain — not whether AI agents are ready to run DeFi.
The useful read is operational. Proposal 9’s title and summary used AI-experiment language; the attack path Unchained and TokenPost document is a governance payload, late-bought voting power, and admin control over Astroport and Drop contracts. Cosmos Hub’s ~25-hour halt and first-block move of 1,227,121 ATOM (~$2.1M) without the wallet owner’s signature is a validator intervention, not a full recovery of Rarma’s ~$9.4M mark. Keep those rulers separate. None of this is a buy or sell on ATOM, NTRN, or anything else in the Cosmoverse.
Sources: Unchained · TokenPost (Cosmos Hub account · Rarma on-chain analysis via Unchained)
