[Cosmos Hub: 1.227 Million ATOM Recovered from Neutron Attack, Funds Temporarily Stored in 4/6 Multisig Address] BlockBeats News, September 26: Cosmos Labs disclosed in a post that on September 22, Neutron suffered a governance attack, leading to the theft of liquidity from protocols such as Astroport. Approximately 1.73 million ATOM were subsequently transferred by the attacker to Cosmos Hub. Cosmos Hub itself was not attacked, and user funds were not affected. To prevent the stolen ATOM from being further transferred, Hub validators temporarily halted the network for about 24.5 hours. On September 23, block production resumed using the updated Gaia v28.3.0. Cosmos Labs stated that during the suspension, 1.227 million ATOM remained in the attacker's Hub address. Upon network recovery, these funds were transferred to a 4/6 multisig address managed by Nansen, Keplr, Enigma, Silknodes, Kiln, and Polkachu through a one-time change. Previously, approximately 500,000 ATOM had been swapped for ETH via THORChain and could not be recovered. Additionally, 169,000 ATOM entered the attacker's address as a refund from THORChain after the network resumed and were subsequently transferred to Osmosis and sold. Currently, the multisig address holds approximately 1.227 million ATOM, which can only be returned upon authorization through a Cosmos Hub governance proposal. The related funds will not be staked, loaned, or traded. The Neutron team is expected to submit a recovery plan and related governance proposal next week. [Original Link]