Validators Restart Cosmos Hub to Resume Block Production

Cosmos Hub officials stated that validators have successfully restarted the network as planned, block production has resumed, and it is currently operating normally. They will continue to monitor and provide updates.

The downtime was not a routine upgrade. Validators halted block production on Tuesday after a governance attack on Neutron, stopping at block height 33086740, and restarted at 12:00 UTC on Wednesday, being offline for over 24 hours, nearly 25 hours. Officials clarified that the Hub itself was not breached, and the affected assets were those migrated from Neutron. The attack initially caused approximately $9.5 million in losses, with the attacker withdrawing only about 20%, while the rest was stuck in the halted network.

The first confirmed block after the restart transferred 1,227,121 ATOM, approximately $2.1 million, with funds coming from addresses related to the attack's proceeds. During the downtime, validators also locked about 1.2 million ATOM, over $2.2 million, on the Hub from the attacker's address. On the Neutron side, about $5 million in assets were also stuck after the halt. The attacker's Ethereum address still holds about $1.8 million, and there are over $300,000 in pending transactions on THORChain, which are planned to be returned to the Hub address after the restart.

This marks the third security incident in the Cosmos ecosystem in recent months. The Hub operates on a proof-of-stake model with about 180 active validators, and block production relies on validator voting; a collective halt by validators can freeze cross-chain and funds held on the Hub, but it also halts the entire settlement layer. Officials described this as a "planned restart," but in essence, it involved stopping the chain and then queuing for refunds, using a coordinated halt to reclaim some of the transferred ATOM.

From a market mechanism perspective, this is an event-driven on-chain freeze and thaw, not a typical buy-sell order. During the halt, cross-chain bridges, staking redemptions, and applications on the Hub could not settle; the first large transfer after the restart was to handle attack-related balances, not new funds entering the market. Beneficiaries are the holders of the stuck assets and the Hub governance that can still coordinate validators, while Neutron's liquidity, cross-chain routing, and consumption chains treating the Hub as a shared security layer are under pressure. ATOM price fluctuations reflect the risk premium of the halt, rather than fundamental orders.

On a supplementary level, the attacker's failure to withdraw all the stolen funds indicates that shared security can still rely on the majority of validators to stop block production in emergencies; however, the same mechanism also proves that the ultimate switch of Cosmos does not lie in smart contracts, but in whether validators can reach a consensus to halt and restart within hours.

Source: Public Information