- Trending
- Comments
- Latest
Initia has suspended its layer-1 network and all rollups after an attacker allegedly minted tokens without authorization and cashed out about $2.6 million. Co-founder Ezaan Mangalji said preliminary findings point to a previously unknown flaw in the MoveVM implementation on the Cosmos SDK, and that the native INIT token was not affected.
The Initia blockchain halted its layer-1 network and associated rollups on October 23, 2026, after security researcher Spreek reported an exploit involving unauthorized token minting and approximately $2.6 million in assets allegedly cashed out by an attacker.
The suspension took effect at 3:41:30 p.m. UTC as the project began working with security teams, validators and exchanges to assess the incident.
The emergency measure followed reports that an attacker had created tokens without authorization and moved assets across networks. Although the initial estimate put the cash-out at approximately $2.6 million, the final financial impact remains subject to verification.
Initia acknowledged the security incident in an announcement published through its official communication channels. The team said it was investigating the situation and working to establish the extent of the damage.
“We will share verified information through our official channels as it becomes available,” — Initia, in its official statement on October 23, 2026.
The network also warned users to exercise caution around unofficial links, messages and claims circulating during the investigation. This is particularly important during security incidents, when fraudulent recovery offers and impersonation attempts can target investors seeking information about their assets.
The suspension affected both the underlying blockchain and its rollup ecosystem, making the incident relevant to users of applications operating within the network.
Until the project clarifies which services and assets were affected, investors should avoid assuming that every application or wallet experienced the same level of exposure.
The incident gained attention after Spreek reported that an attacker had allegedly generated tokens without authorization and converted a substantial amount into other crypto assets.
“Initia chain hacked and a bunch of toke8ns infiniminted. Hacker has cashed out $2.6m thus far with more in flight,” — Spreek, blockchain security researcher, in a post on X.
The researcher’s estimate was an early assessment rather than a final accounting of losses. Subsequent reporting identified movements involving Ethereum and assets including AUSD, Ether (ETH) and USD Coin (USDC).
An incident advisory published by 0xCERT, drawing on on-chain analysis attributed to D2 Finance, described approximately $2.65 million in assets reaching Ethereum through transactions involving bridge infrastructure.
The advisory also reported that around 1,135.5 ETH, worth approximately $2.73 million at the time of the analysis, was consolidated in a wallet associated with the incident.
These figures represent different stages of the reported activity and should not automatically be added together. A definitive reconciliation requires verified transaction analysis and confirmation from the parties investigating the exploit.
The incident also raised questions about the security of cross-chain systems. Bridges enable assets and messages to move between blockchain networks, but their design and verification mechanisms can introduce risks if attackers exploit weaknesses in token issuance or bridge adapters.
A separate issue emerged over the role of AUSD in the reported transactions. Agora, the stablecoin’s issuer, disputed the suggestion that its own AUSD had been minted on Initia, stating that it had no smart contracts deployed on the network.
The 0xCERT advisory, which references the issuer’s clarification and D2 Finance’s analysis, attributed the losses to the depositors of a third-party AUSD bridge adapter.
The precise allocation of responsibility and the full impact on affected users remain dependent on the continuing investigation.
Investors should therefore distinguish between confirmed operational developments, preliminary on-chain findings and allegations that have not yet been fully reconciled. Initia confirmed that it halted its network, while the initial dollar estimate originated with an independent researcher.
The native INIT token is another important consideration. The Block reported that Initia co-founder Ezaan Mangalji, also known as Zon, said preliminary findings pointed to a previously unknown vulnerability in the network’s MoveVM implementation on the Cosmos SDK. He said the issue did not affect the native INIT token.
That assessment is relevant to holders, but it should not be interpreted as a guarantee that the wider ecosystem is free from risk.
Even when a native token is not directly affected by a vulnerability, network downtime can disrupt applications, transfers, liquidity and investor confidence.
Investors also need to consider how a project handles vulnerabilities, communicates during emergencies and protects users when interconnected infrastructure fails.
For now, users should rely on verified announcements from Initia and avoid attempting to move assets through affected networks until the project confirms that operations are safe.
Anyone investigating potential exposure should check official communications and relevant transaction records rather than relying on social media claims or unsolicited messages promising compensation.
Investors should also avoid treating an initial loss estimate as a settled figure. The reported $2.6 million cash-out and subsequent Ethereum movements provide an indication of the incident’s possible scale, but the final amount, affected accounts and any recovery prospects require further confirmation.
The next significant developments will be the publication of a technical explanation, confirmation of the assets and applications affected, and details of any remediation measures.
A clear account of the vulnerability and the safeguards implemented before a restart would help users assess whether the project has adequately addressed the underlying risk.
The Initia blockchain incident is a reminder that cross-chain functionality introduces security considerations that extend beyond a single network.
Copyright © 2025 - The Bit Gazette.
