Neutron voters passed proposal #9 on Sept. 22, listing 11 “Update Admin” actions on the chain explorer. That same day, security tracker SlowMist estimated $4.9 million in losses at Astroport and $4.4 million at Drop, a combined $9.3 million. The proposal was titled “AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration.”
Why it matters
Neutron’s governance documentation describes its DAO as the network’s highest governing authority, with the power to execute messages through governance. “Update Admin” is the action named in the proposal index. In practical terms, governance can change a contract’s administrator, so an application’s exposure may depend not only on its own procedures but also on authority retained at the network level.
The timing links the governance vote and the reported incidents, but does not by itself establish that the 11 administrative updates caused the losses. The proposal shows a route for changing administrators; SlowMist’s records identify Astroport and Drop as the affected applications.
Market impact
The final amount users may recover remains unresolved. Protos reported on Sept. 23 that network halts had stranded most of the initially affected assets and that the attacker had extracted around one-fifth at the time of its report. Containment during a halt is not the same as returning funds to users, and the extraction share is distinct from the reported incident-loss estimates.
Recovery depends on what remains contained, what has been restored, and what has left defenders’ reach. The reported figures therefore do not yet settle how much affected users will ultimately get back.
Frequently asked questions
-
What did Neutron proposal #9 authorize?
The proposal index listed 11 “Update Admin” actions. Neutron’s governance documentation says its DAO can execute messages through governance.
-
How were the $9.3 million in reported losses divided?
SlowMist estimated $4.9 million in losses at Astroport and $4.4 million at Drop, totaling $9.3 million.
-
Does the same-day timing prove the proposal caused the losses?
No. The timing links the vote and the reported incidents, but the available details do not establish that the administrative updates caused the losses.
-
What did reports say about the affected assets after network halts?
Protos reported on Sept. 23 that network halts had stranded most initially affected assets and that the attacker had extracted around one-fifth at that point.
-
Why does a network halt not settle how much users will recover?
A halt can contain assets without returning them to users. The final recovery amount depends on what remains contained, what is restored, and what has left defenders’ reach.
CryptoSlate