According to CoinMeta, and based on the analysis by the Chinese community in goplus, on September 22, attackers obtained administrative permissions for contracts related to Astroport and Drop through a governance proposal in neutron and transferred assets, resulting in a nominal loss of approximately 9.4 million US dollars, of which about 1.96 million US dollars were transferred across chains. The reason for the attack was that the wasmd used in neutron allowed for contract administrators to be rewritten through on-chain governance, meaning that multi-signatures at the application layer did not constitute the ultimate authority boundary. The proposals submitted by the attackers were packaged as AI governance research experiments, but actually contained 11 msgupdateadmin. At the time of the incident, neutron had already staked ntrn with a market value of about 113,000 US dollars, yet the attackers controlled assets from contracts worth approximately 9.4 million US dollars.