An attacker flash-bought about $20K in NTRN voting power and used it to seize control of roughly $9.4M in contract assets, gaining admin rights over the Astroport and Drop Money contracts before draining funds. Around $1.96M had already been bridged out when Cosmos Hub validators coordinated a ≈24-hour, 48-minute halt to intercept and redirect about 1.23M ATOM back to victims.
Cheap voting power controlling far larger treasury value is a structural flaw here, and it may push other Cosmos SDK chains to rethink their admin-migration permissions.