Incident case file
Sign in to watchDrop Protocol Neutron Governance Attack
Incident date Sep 22, 2026Last updated Oct 8, 2026
1 views
RecoveringNeutronCosmosGovernance exploitCluster: DROP-NEUTRON-2026-09
Estimated loss
$4.4M
Affected users
Number of affected users is not confirmed
Group joining is coming soon.
Investigation
80%
Facts and investigation
Ledger
Attacker
neutron1dd25c4sshelrpfs0433apg24c5phrhk8l6n605 (Neutron) / cosmos1dd25c4sshelrpfs0433apg24c5phrhk8m96c4n (Cosmos Hub) — same attacker as the paired Astroport incident
Funds moved to
Attacker-controlled Neutron/Cosmos addresses; partial recovery coordinated via a 4-of-6 recovery multisig (cosmos1z8pq5cn7tdrwwzlwm0e44fgq07e43ner6vph64)
Linked
Paired incident with Astroport (same attacker, same attack window) on Neutron governance infrastructure. No individual LP/victim count has been publicly disclosed as of last verification.
Chronology
1 beatBetween 02:25 and 07:44 UTC on September 22, 2026, the same attacker who hit Astroport exploited Neutron's governance mechanism to drain approximately $4.4M from Drop Protocol in a closely related action. A 4-of-6 recovery multisig was established to coordinate fund recovery with validator and ecosystem support. Individual liquidity provider impact has not been itemized in public disclosures.
Sources and coverage
Victim testimonies
No testimonies yet.
+ Add my testimony → (coming soon)