According to CoinMeta, after a network outage of about 24.5 hours, the Cosmos Hub validators successfully recovered 1.23 million ATOM that were stolen in a Neutron governance attack. In an update on September 25th, Cosmos Labs stated that Hub itself was not attacked, and user funds were not affected. The stolen ATOM came from Neutron, and the attackers controlled the contracts used by Astroport and other protocols through malicious governance proposals. On September 23rd, the validators used Gaia and v28.3.0 software updates to restart the network and transferred the balances to wallets controlled by six community validators. According to the arrangements of Cosmos Labs, signatories could not retrieve their funds until the Cosmos Hub governance proposal authorized the transfer. After the Neutron attack, the attackers sent the stolen assets to multiple chains and began to exchange some of the ATOM through Thorchain. Cosmos Labs indicated that the recovery team expects to submit a proposal within the next week.