Proposal #9, Sept 22. Neutron DAO waves it through, and wouldn't you know it — the same day SlowMist clocks $9.3M gone on that chain. Astroport on one side, Drop on the other. And the proposal payload? Right there on the explorer, no decoder ring needed: 11 "Update Admin" actions. That's the exact switch that lets governance hand a contract's administrator role to somebody else. Not a bug. A built-in feature, and you're the exit liquidity.
▪️ Neutron's docs themselves call its DAO the network's top governing authority — able to execute messages via governance. Admin keys sit above the apps, not inside them.
▪️ Proposal title, straight off the explorer: "AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration." Yeah. That's the one that passed.
▪️ You meet Astroport and Drop as separate products. On the chain layer, one governance action reaches the administrator of either one. Two apps, one master key — cute, huh?
▪️ Protos, Sept 23: network halts stranded most of the affected assets, but the attacker had already walked off with roughly one-fifth of it. Poof.
▪️ Combined $9.3M is an estimate across two incidents, not a settled loss. Contained assets aren't returned assets, and a halt isn't a refund. Write that on your monitor.
📊 Astroport:
$4.9M📊 Drop:
$4.4MIf you're LPing or farming on Neutron, the audit you read on Astroport covered none of this — the chain's governance sits above the app contracts with admin power, and that's the door nobody locks. Halts contained most of the funds, but freezing isn't restoring, and whatever the attacker pulled is gone. Watch the recovery math: which assets stayed contained, which got restored, which left defenders' reach. That's the only number victims actually care about. Everything else is damage-control PR.
🔮 An "AI Agent Takeover" proposal passed and millions vanished the same day. Total coincidence, I'm sure. Check who holds admin on your chain. On any chain, honestly.
@pixeos
