NewsCryptoCosmos Hub Voters Deliver 94.64% Veto Against Proposal to Refund Neutron Attacker 1.2 Million ATOM

Cosmos Hub Voters Deliver 94.64% Veto Against Proposal to Refund Neutron Attacker 1.2 Million ATOM

Author: CryptoBriefing·

Key Takeaways

  • •Cosmos Hub voters rejected Proposal #1056 with 94.64% of participating voting power casting "NoWithVeto," far exceeding the 33.3% veto threshold that burns the proposal's deposit.
  • •The rejected proposal would have returned approximately 1.2 million seized ATOM to the attacker and paid a 500,000 ATOM bounty to voters who supported it.
  • •On September 22, 2026, an attacker spent roughly 20,199 USDC to buy about 31.6 million NTRN tokens and gained control over 10 to 11 Neutron contracts, causing an estimated $9.4 million in total impact.
  • •Validators halted the Cosmos Hub at block height 33,086,740 for roughly 25 hours before transferring 1,227,121 ATOM into a multisig address when operations resumed on September 23.
  • •Overall turnout reached only 19.94%, below the 40% quorum required for passage, and about $5 million remains trapped on the halted Neutron protocol, with recovery likely requiring separate governance actions.
Cosmos Hub Voters Deliver 94.64% Veto Against Proposal to Refund Neutron Attacker 1.2 Million ATOM

Cosmos Hub voters have issued one of the most decisive governance rejections in recent memory. Proposal #1056, which sought to return approximately 1.2 million ATOM seized after the Neutron protocol attack to the attacker's wallet, drew a 94.64% "NoWithVeto" vote — the harshest rejection mechanism available under Cosmos governance.

The attack that triggered the seizure

On September 22, 2026, an attacker exploited governance vulnerabilities within the Neutron protocol. By spending roughly 20,199 USDC to purchase approximately 31.6 million NTRN tokens, the attacker gained controlling rights over 10 to 11 protocol contracts. The episode illustrates the core property of token-weighted governance: control rights follow token holdings, so an open-market purchase of enough supply translates directly into power over a protocol's contracts.

The estimated total impact of the attack reached approximately $9.4 million. Around $5 million remained trapped on the halted Neutron protocol, while about $2.1 million worth of ATOM had already been bridged over to the Cosmos Hub through an interchain exploit.

Validators responded by halting the Cosmos Hub at block height 33,086,740, a drastic measure that kept the network offline for roughly 25 hours. When operations resumed on September 23, validators executed a one-time state-level change, transferring 1,227,121 ATOM out of the attacker's reach and into a multisig address for safekeeping.

The proposal nobody wanted

Proposal #1056, titled the "ATOM Refund & Justice Bounty," called for returning the seized 1.2 million ATOM to the attacker's wallet. It also proposed a 500,000 ATOM bounty to be distributed among voters who supported the proposal.

The voting period ran from September 23 through September 30. Of the voting power that participated, approximately 63.4 million ATOM's worth cast "NoWithVeto" ballots, accounting for 94.64% of all votes. Another 4.02% abstained, 1.08% voted a standard "No," and just 0.25% voted "Yes."

In Cosmos governance, a "NoWithVeto" vote carries extra weight. If more than 33.3% of participating votes are vetoes, the proposal's deposit is burned rather than returned — the option exists specifically for proposals voters judge as harmful to the chain, making it a stronger signal than an ordinary "No." Proposal #1056 cleared that threshold nearly three times over.

Overall turnout reached only 19.94%, well below the 40% quorum required for a proposal to pass. So even if every single voter had somehow flipped to "Yes," the proposal still would have failed on procedural grounds.

What the veto says about Cosmos governance

The fact that an attacker could spend roughly $20,000 to compromise contracts worth $9.4 million highlights an asymmetry in interchain governance models. Governance tokens that are cheap enough to accumulate in bulk can become attack vectors rather than protective mechanisms.

The roughly $5 million still sitting on the halted Neutron protocol an open question. Recovery efforts for those funds will likely require separate governance actions and cross-chain coordination. For the 1,227,121 ATOM now held in multisig custody, the veto means the funds stay put for now — any further movement would be a matter for future governance decisions.