SKN | Initia Halts Blockchain After Reported Exploit Drains $2.6 Million

Key Points

•  Initia halted its layer-1 blockchain and associated rollups following reports of a security exploit involving unauthorized token minting.
• Security researchers reported that the attacker converted unbacked AUSD tokens into assets transferred to Ethereum, including ETH and USDC.
• Initia has not publicly confirmed the estimated losses or the precise vulnerability, and the timeline for restoring operations remains unclear.

Initia Suspends Network Following Security Incident

Initia suspended its layer-1 blockchain and associated rollups on Friday after security researchers reported an exploit that allegedly enabled an attacker to mint tokens without authorization and transfer more than $2.6 million in cryptocurrency assets.

The network was halted at 3:41 p.m. UTC, according to a statement published by Initia on X. The team said it was working with security researchers, validators and exchanges to assess the incident and determine its full impact.

The suspension affected Initia’s core blockchain and its interconnected rollups, known as Minitias. The decision interrupted network operations while the team investigated the reported vulnerability and potential exposure of user assets.

Initia has not independently confirmed the estimated financial losses or publicly established the precise cause of the incident.

Researchers Trace Reported $2.6 Million Exploit

Blockchain security researcher Spreek initially flagged the incident, reporting that an attacker had minted tokens without authorization and converted approximately $2.6 million into other assets.

DeFi platform D2 Finance subsequently provided additional details, alleging that the attacker exploited a vulnerability to create 2 million AUSD tokens without sufficient backing.

According to D2 Finance, the attacker then used cross-chain transfers to move approximately 1.4 million AUSD, 105 Ether (ETH) and 1.08 million USD Coin (USDC) to Ethereum.

The assets were reportedly consolidated into an Ethereum wallet holding approximately 1,135.5 ETH, valued at around $2.73 million at the time of the report.

D2 Finance attributed the incident to a vulnerability in a Move function that allegedly allowed the attacker to create unbacked tokens and exchange them for assets on Ethereum. This account has not been publicly confirmed by Initia, so the precise technical cause remains unverified.

The reported sequence illustrates how a token-minting vulnerability can potentially extend beyond the affected blockchain when an attacker exchanges newly created tokens for other assets and transfers them across networks.

INIT Token Reacts to the Incident

Initia’s native token, INIT, experienced price volatility following the reported exploit and network suspension.

According to CoinGecko data cited in the report, INIT briefly fell to approximately $0.115 before recovering above $0.15. It was trading near $0.1496 at the time of publication, representing an increase of approximately 14% over the preceding 24 hours.

The reported recovery came despite uncertainty surrounding the security incident and the interruption to network operations. The available price data does not establish why the token rebounded or whether the movement reflected investor positioning, broader market conditions or other factors.

Market prices alone also do not indicate whether affected users have recovered their assets or whether the network’s underlying security issues have been resolved.

Investigation and Recovery Remain Uncertain

Initia said it was coordinating with security researchers, validators and exchanges to determine the extent of the incident. However, the team had not publicly confirmed the estimated losses or the exact vulnerability described by D2 Finance.

The impact on individual users, the status of potentially affected assets and the timeline for resuming network operations remained unclear at the time of publication.

The incident places attention on the security of token issuance mechanisms and cross-chain infrastructure. If the reported sequence is confirmed, the ability to create unbacked tokens and exchange them for established assets would represent a significant weakness in the affected system.

For now, the reported transaction amounts and technical explanation should be treated as preliminary findings rather than a final incident assessment.

Outlook

The next key developments will be Initia’s technical findings, confirmation of the reported losses and any announcement regarding the restoration of network operations. The effectiveness of the response will depend on identifying the vulnerability, limiting further exposure and clarifying the status of affected assets. Until the team provides a verified account, the scale of the damage and the precise cause of the exploit remain unresolved.