Neutron DAO vote triggers $9.3M loss across two DeFi apps

Neutron voters passed proposal #9 on Sept. 22, the same day security tracker SlowMist recorded an estimated $9.3 million in losses across two DeFi applications. The proposal, titled "AIATO: AI Agent Takeover. Phase 1: Agent Admin Registration," listed 11 "Update Admin" actions on the chain explorer.

The timing is the decisive detail. SlowMist recorded estimated losses of $4.9 million at Astroport and $4.4 million at Drop. Neutron’s governance documentation describes the DAO as the network’s highest governing authority, capable of executing messages through governance. The 11 admin updates on the proposal index cover the specific contracts where those losses occurred, meaning the chain-level process retained consequential control over software users experience as separate services.

The final loss amount remains unsettled. Protos reported on Sept. 23 that network halts had stranded most of the initially affected assets, while the attacker had extracted around one-fifth of the funds at the time of that report. A network halt contains assets without returning them to users, so the reported extraction share measures movement beyond the halted networks, a different metric than the application-level incident estimates.

Audited DeFi protocols previously lost $885 million to attacks that occurred completely outside their audit scopes, a benchmark for risks that sit between the app and the chain. For affected users, the unresolved issue is how much of the reported value can actually be returned. The picture changes when the network identifies which assets remain contained, which have been restored, and which have left defenders’ reach, because those three categories determine the final recovery figure.