Neutron pauses services after white hat flags security vulnerability

Neutron, which identifies itself as a public PoS blockchain that allows BTC holders to earn yields on a suite of BTCFi products and services, has announced a temporary service disruption until at least March 9 after a security update in which it said “a white hat flagged a vulnerability” in its code. 

Neutron quickly moved to calm fears about fund safety in its announcement, noting that all funds are safe and that users did not have to take any further action at this time. 

However, until at least March 9 when it promised that fixes are due to go live, it said its orderbook and Supervault deposits, withdrawals and offline swaps will remain offline. 

Neutron’s NTRN token is currently trading at $0.0114, oscillating within a tight range between $0.0118 and $0.0112 in the short-term, with a sustained downward trend over 30 days and longer time frames. 

Which bug did white hats find in Neutron’s code?

Neutron did not share details of the vulnerability that white hats found in its code, as is the practice in these kinds of cases, to avoid exploits before they can definitively plug the holes in their system. 

In its public disclosure of the discovery, the project did commit to pushing a fix within days, at which point, it could also release a post-mortem detailing the defect that the white hats detected, and how it managed the fix. 

All of these disclosures suggest Neutron has engaged in productive correspondence with the white hats, which is the best-case scenario. Other cases haven’t been handled with similar discretion. 

In January 2026, Cryptoplitan reported that SlowMist analysts raised a public alarm after they failed to reach HitBTC in at least three attempts in a matter of weeks. 

Just one month before that, analysts from the same security firm issued similar notices after failing to initiate private contact with Seychelles-registered Azbit and Turkish exchange ICRYPEX Global.

Neutron’s bug bounty program formally launched on July 2, 2024, teasing rewards packages ranging from $1,000 to a maximum of $100,000, depending on the nature and severity of the vulnerability reported. 

Bitcoin DeFi sinks under wave of product halts

The latest service disruption at Neutron adds to a recent wave of negative news to hit the fledgling $4.4 billion Bitcoin DeFi (BTCFi) sector, which remains a small fraction of the almost $53 billion parked in markets across Ethereum. 

On February 20, Structured, a project with plans to “build a sustainable BTC yield product that was liquid, scalable, and capable of unlocking new use cases like BTC yield looping,” announced that it is closing shop merely months after its October 2025 launch. The project peaked at an 84-BTC TVL before it was shut down. 

On the same day, Neutron also announced that it would sunset its Bitcoin Summer program at the end of its Phase 3 campaign on March 16, naming Structure’s decision as part of why the wind-down became inevitable. 

According to Neutron, the campaign peaked at over $50 million in BTC total value locked (TVL).

A third project, Amber, was also pushed over the edge, sharing that it will halt deposits and carefully unwind exposure through March 23. 

Drop, a project meant to “make staked assets productive across the Interchain and expand access to liquidity for Cosmos assets,” also announced wind-down plans for dAssets, including Neutron’s NTRN token, because of the “current direction” of the Cosmos ecosystem and broader market conditions. 

The projects blamed unfavorable market conditions for their decisions, similar to Zerolend, which announced plans to shut down its lending market last month. 

Even thriving projects like Aave have also had to make some strategic cuts in response to market conditions, pushing forward despite recent drama among ecosystem developers over project direction.

If you're reading this, you’re already ahead. Stay there with our newsletter.