Initia halted its layer-1 blockchain and associated rollups on Friday at 3:41 p.m. UTC following a security exploit that reportedly drained over $2.6 million in crypto assets. The network suspension was announced by the Initia team via X, stating they were collaborating with security researchers, validators, and exchanges to assess the full impact of the incident.
Blockchain security researcher Spreek initially flagged the breach, noting that an attacker minted unauthorized tokens and converted approximately $2.6 million into other assets while additional funds remained in motion. DeFi platform D2 Finance later detailed that the exploit involved a vulnerability allowing the creation of 2 million unbacked AUSD tokens. The attacker utilized cross-chain transfers to withdraw roughly 1.4 million AUSD, 105 Ether (ETH), and 1.08 million USDC to Ethereum. These stolen assets were consolidated into an Ethereum wallet holding approximately 1,135.5 ETH, valued at $2.73 million.
D2 Finance attributed the exploit to a flaw in a Move function that enabled the generation of unbacked tokens exchangeable for assets on Ethereum. Initia, designed to support interconnected rollups known as Minitias, saw its native token INIT briefly drop to around $0.115 before rebounding above $0.15. As of the time of reporting, INIT traded near $0.1496, marking a 14% increase over the previous 24 hours. Initia has not publicly confirmed the specific loss figures or the precise technical cause, leaving the extent of user impact and the timeline for network restoration unclear.
The halt of Initia’s network underscores the operational risks inherent in complex layer-1 architectures that rely on interconnected rollups. By suspending operations immediately upon detection, the team prioritized containment over continuous availability, a standard but disruptive response in decentralized finance. The reliance on external researchers like Spreek and D2 Finance for initial forensic details highlights a gap in immediate transparency from the project itself, potentially affecting user trust during critical incidents.
From a regulatory and compliance perspective, the exploitation of a Move function vulnerability raises questions about code auditing standards for emerging blockchains. While the financial loss is significant, the rapid market recovery of the INIT token suggests speculative resilience rather than fundamental stability. Investors and users must monitor whether the root cause—unauthorized token minting due to insufficient backing checks—is fully patched before the network resumes, as similar flaws could recur if underlying smart contract logic remains unverified.
