Hack history / 2026 / Hack or exploit
Astroport
Hack or exploit on Sep 22, 2026 · Malicious Proposal
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$4.9M
dollars at the time
Returned
none listed
as the sources state it
Rank
#459
among thefts by dollars lost
What happened
Neutron governance proposal 9 contained MsgUpdateAdmin messages that reassigned administration of Astroport contracts despite those contracts previously being administered by Astroport’s own governance contract. After the proposal passed, the attacker migrated Astroport Staking and six Astroport pair contracts to attacker-uploaded code containing a withdraw_all entry point and swept their balances. The attack did not exploit Astroport’s swap or pool logic
Details
- Date
- Sep 22, 2026
- Kind
- Hack or exploit
- Method
- Malicious Proposal
- How in
- Price, oracle and governance
- Target
- DeFi protocol
- Chains
- Neutron
Reported by
Related incidents
BonkDAO 2026 · Hack or exploit · $20M
TermFinance Vaults 2026 · Hack or exploit · $8.5M
Drop 2026 · Hack or exploit · $4.4M
RetoSwap 2026 · Hack or exploit · $2.7M
Token of Power 2026 · Hack or exploit · $1.6M
TermFinance Vaults 2026 · Hack or exploit · $8.5M
Drop 2026 · Hack or exploit · $4.4M
RetoSwap 2026 · Hack or exploit · $2.7M
Token of Power 2026 · Hack or exploit · $1.6M
Cite this page
SwanBluechip, "Astroport hack, Sep 22, 2026: $4.9M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1d007752fd/ (data as of 2026-10-31).