Temporary Custody of Unlocked Neemo dApp Staking ASTR in Astar Treasury and Change of Neemo dApp Ownership to Astar On-Chain Treasury
Summary
Neemo Finance urgently requests that all ASTR currently being unlocked from Neemo’s dApp staking allocations be transferred to the Astar on-chain treasury, instead of any Neemo-controlled address. This includes both currently withdrawable and pending-unlock funds. Also we requests temporarily change the dApp ownership of Neemo Finance in the dApp Staking to the Astar core team, Main Council, or any other trusted and secure party.
This action is being formally requested to the Main Council, who will prepare and fast-track this proposal for execution with the support of the core dev team.
Compromised addresses:
dappStakingManager (nsASTR) : 0x85031E58C66BA47A16Eef7A69514cd33EC16559c
stakingManagerL1 (nrETH) : 0x54Cd23460DF45559Fd5feEaaDA7ba25f89c13525
Background
We sincerely apologize for the recent security incident. Multiple key addresses and our main operational wallet were compromised by an attacker. As a result, we are unable to pause/unpause our smart contracts or prevent malicious access.
The attacker is actively attempting to withdraw 26,783,546.036 ASTR (from the Chunk1) which is pending-unlock funds and unlock 177,500,000 ASTR (Chunk 2) and could gain access upon withdrawal enablement.
To prevent this, and to protect both Neemo users and Astar ecosystem integrity, we are urgently requesting that the ownership of Neemo’s dApp in the staking system be temporarily transferred to the Astar on-chain treasury, and that all unlocked funds be redirected to the treasury for secure custody.
Current Unlocking Status (as of July 6, 2025):
- Chunk 1: 26,783,546.036 ASTR — unlock completed (but withdrawals disabled)
- Chunk 2: 177,500,000 ASTR — unlock in progress (9 days remaining)
- Total under custody: 204,283,546.036 ASTR
- dApp Staking system is currently in maintenance mode, but preparation for post-maintenance fund transfer is ongoing.
Proposal Details
- Action: Redirect the entire amount of Neemo’s dApp staking unlocked ASTR (both available and pending) to the Astar Treasury and change the dApp ownership of Neemo Finance in the dApp Staking to the Astar core team, Main Council, or any other trusted and secure party.
- Fund Destination: Astar on-chain treasury (not any Neemo-related wallet).
- Duration: Until Neemo submits a verified secure address.
- Applies to: The Chunk1 of unlocked assets (26,783,546.036M ASTR) and the Chunk2 of the unlocked fund (177,500,000 ASTR)
- Execution: To be performed immediately upon technical readiness of withdrawals.
Rationale
This approach provides the safest interim custody for a large unlocked amount of ASTR and the owner transfer during a period of address recovery and verification. By routing funds to the treasury, we ensure:
- No unauthorized access or fund loss
- Full transparency and auditability
- Time for Neemo to finalize and verify its new secure infrastructure
Next Steps
- When technically possible,
- Change the dApp owner of Neemo Finance (0x85031E58C66BA47A16Eef7A69514cd33EC16559c)
- 26,783,546.036 ASTR from Chunk 1 are sent to the Astar on-chain treasury: YQnbw3oWxBnCUarnbePrjFcrSgVPP2jqTZYzWcccmN8fXhd from the Neemo compromised wallet (0x85031E58C66BA47A16Eef7A69514cd33EC16559c)
- Chunk 2 will require a 2nd referendum later this week
- Neemo completes address verification with the core team
- A second governance post enables final transfer from treasury to Neemo