Initia Halts Blockchain Operations Following $2.6 Million Token Exploit
Initia has stopped operations of its layer-1 blockchain and associated rollups after blockchain experts revealed a security breach. This vulnerability permitted an attacker to forge tokens without permission and abscond with over $2.6 million in cryptocurrency assets.
The network suspension was initiated at 15:41 UTC on Friday due to the security incident, the team disclosed via a statement on X. They are now collaborating with security analysts, validators, and exchanges to assess the full scope of the damage caused.
Blockchain security researcher Spreek was the first to raise alarms on Friday, indicating that the attacker minted unauthorized tokens and exchanged roughly $2.6 million worth of these for other assets. Movement of additional funds was reported to be ongoing.
DeFi platform D2 Finance later confirmed that the attacker exploited a flaw to mint 2 million AUSD tokens without sufficient collateral. Through cross-chain transactions, around 1.4 million AUSD, 105 Ether (ETH), and 1.08 million USDC were withdrawn to the Ethereum network.
The stolen cryptocurrencies were gathered into an Ethereum wallet holding about 1,135.5 ETH, valued by D2 Finance at approximately $2.73 million. The breach was attributed to a vulnerability in a Move function that let the attacker create unsecured tokens and swap them for Ethereum-based assets.
Initia is a layer-1 blockchain engineered to facilitate a network of interconnected rollups, called Minitias. Following the attack, its native token, INIT, dropped temporarily to nearly $0.115 before recovering above $0.15. At the time of reporting, INIT trades near $0.1496, marking a 14% increase in 24 hours.
Initia has yet to officially disclose the precise extent of losses or the detailed cause of the exploit. Additionally, the impact on users and the timeline for resuming network operations remain unknown. Efforts to reach Initia via its official X account for further commentary were unsuccessful.
Initia’s rapid shutdown highlights the increasing security challenges facing emerging layer-1 blockchains and their associated ecosystems. Addressing such vulnerabilities promptly is critical to maintaining user trust and safeguarding the integrity of decentralized finance platforms.
Why it matters
This incident underscores the critical importance of robust security in blockchain protocols, especially for layer-1 chains supporting complex ecosystems and cross-chain transactions. Rapid response and transparency are vital to mitigating damage and restoring confidence among users and partners.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗