Cosmos Hub Recovers Stolen Tokens Amid Network Halt

The Cosmos Hub network halted operations for nearly 25 hours to contain assets moved from Neutron, an incident that followed an expedited governance proposal to reassign control over 11 smart contracts.

During this time, validators successfully recovered approximately $2.2 million in stolen ATOM tokens, moving them from an address linked to the exploit to a recovery address.

The restart of the network at block 33,086,741 on September 23 also triggered a THORChain refund that arrived at the attacker-linked wallet seven blocks later.

Unbeknownst to validators, this refund contained a further 168,990.9 ATOM tokens, which were then routed through Osmosis and exchanged for around 266,841 USDC before being converted into Ether (ETH).