Cosmos Hub halts for 25 hours to recover stolen ATOM from Neutron exploit
Cosmos (ATOM)
Editor:
Eugene Serbin
Cosmos Hub validators coordinated a rare full network shutdown to freeze 1.2 million ATOM tied to a governance exploit that drained $9.5 million from Neutron applications, cryptobriefing.com reported. The halt began at block height 33086740 on September 22 and ended at 12:00 UTC on September 23 when normal block production resumed. The root cause originated on Neutron, where an attacker used a governance proposal to seize control of Astroport and Drop for roughly $20,200 in NTRN tokens.
This allowed access to contracts worth an estimated $9.5 million, though Neutron independently halted operations to trap about $5 million in assets. A portion of the stolen funds, specifically 1.2 million ATOM, had already moved to a Cosmos Hub address, requiring a separate intervention. Validators kept the chain frozen for 25 hours to prevent the attacker from transferring, swapping, or bridging the stolen ATOM to places where recovery would be difficult.
Upon restart, the network successfully moved the stolen ATOM out of the attacker’s wallet. Daily. Free.
Join 34,000+ readers across crypto, finance, and policy. No user funds on the Cosmos Hub were lost as a result of the incident or the halt. This marks the third notable security event in the Cosmos ecosystem in a short window, following an August 2026 vulnerability related to the Cosmos EVM.
How the market reacted
Whalio's own Binance spot order flow for ATOM, measured when this story was written up on 23 September 2026. Not the outlet's figures.
ATOM trades at $1.85 on Binance spot with a 24-hour buy ratio of 50.1%, indicating a near-even split between buyers and sellers. Short-term pressure shows slight bearishness, with the 1-hour buy ratio at 47.6% and the 4-hour ratio at 49.7%, both trailing the daily average. Volume delta confirms this shift, showing net selling of -$3,515 over the last hour and -$8,262 over four hours. The cumulative volume delta for the day closed at -$95,736, reflecting net outflows. However, the 24-hour volume delta remains positive at +$3,532, suggesting that buying pressure accumulated earlier in the day before fading. Net buying occurred in only 9 of the 24 hours, indicating that sellers dominated the final trading session.
The latest daily buy ratio of 44.7% sits at the 9th percentile of the last 322 days, against a median of 49.8% - among the weakest buying days it has had.
Was that an ordinary day?
The same Binance spot measurements for ATOM, averaged over the days leading up to the story.
Over the preceding week, ATOM saw a 21.6% price increase and traded at 1.43 times its average volume. The 7-day average buy ratio stood at 51.1%, slightly higher than the current 24-hour reading of 50.1%. This represents a 1.1 percentage point drop from the weekly average, signaling a normalization of buying interest. Weekly volume delta totaled +$452,198, contrasting with the recent negative hourly deltas. While the week showed strong momentum with net buying on 5 of 7 days, today’s flow reflects a cooling of that immediate enthusiasm.