-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0229
============================================================

Advisory-ID:  0xCERT-2026-0229
Severity:     High
Published:    2026-09-22T00:00:00.000Z
Updated:      2026-10-08T22:51:22.619Z
Chains:       Other / Multi-chain
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0229

Title: Neutron Governance Takeover

Summary
- -------
An attacker bought cheap voting power to pass a malicious Neutron governance proposal, seizing admin rights over ten Astroport and Drop contracts and draining about $9.4 million in 24 minutes.

Details
- -------
Summary
An attacker bought cheap voting power to pass a malicious Neutron governance proposal, seizing admin rights over ten Astroport and Drop contracts and draining about $9.4 million in 24 minutes.

Incident
- - Victim: Neutron
- - Date (UTC): 2026-09-22
- - Estimated loss: $9.4M
- - Chain(s): Neutron
- - Attack type: governance
- - Funds status: stolen

Recommended actions
- - Revoke token approvals granted to Neutron contracts until the project confirms they are safe
- - Integrators: pause or delist affected assets and monitor for attacker fund movements
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
Full analysis on Blockchain Breaches, 0xCERT's incident archive: https://www.blockchainbreaches.com/en/breaches/neutron-2026. Primary sources: https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/ ; https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369 ; https://thecurrencyanalytics.com/altcoins/cosmos-hub-goes-dark-for-24-hours-after-9-5-million-neutron-governance-breach-296455.

References
- ----------
- - https://www.blockchainbreaches.com/en/breaches/neutron-2026
- - https://en.cryptonomist.ch/2026/09/23/neutron-governance-attack-exploit/
- - https://forum.cosmos.network/t/neutron-governance-attack-cosmos-hub-response-and-recovery-update/17369
- - https://thecurrencyanalytics.com/altcoins/cosmos-hub-goes-dark-for-24-hours-after-9-5-million-neutron-governance-breach-296455

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmrIRrwJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmej6uFm9vwZsAr6N/qFKf6ILOV1iaet2EGIvvvd
ZD9VBxYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAABv0AD/eet5gMRN0uUm5INs
NPiQKuolX+tRL0hf4A9SCHhDfBMBAPyvIo8dVz8s+aYyh4n1lbmpPdZSSl1Y
nwpAByb2Y70B
=6Z7Z
-----END PGP SIGNATURE-----