Around 15:41 UTC on October 23, 2026, the Initia blockchain development team urgently intervened to halt operations across its layer-1 network and all connected rollup chains. The decision came immediately after on-chain security researchers discovered signs of a severe exploit that allowed an attacker to mint unbacked tokens and bridge funds to the Ethereum network.
The incident occurred amid ongoing security breaches across the cryptocurrency market, following a volatile run of Q3 security loss statistics.
Abnormal Token Minting Mechanism and Capital Flight to Ethereum
The initial alert was raised by security researcher Spreek, who noted that the attacker successfully exploited a function in the MoveVM to mint unbacked tokens on Initia. According to supplementary analysis by D2 Finance, the attacker created 2 million unbacked AUSD tokens, then used cross-chain bridges to move roughly 1.4 million AUSD, 105 Ether, and 1.08 million USDC over to the Ethereum network.
After bridging the assets to Ethereum, the attacker swiftly swapped the stablecoins and consolidated all proceeds into a single wallet holding 1,135.5 ETH, worth approximately $2.73 million. While established institutions like JPMorgan bring deposit tokens to Ethereum under strict controls, experimental DeFi protocols continue to serve as lucrative targets for hackers.
A representative from issuer Agora subsequently clarified that the company had never deployed any official smart contracts on the Initia network. The drained transactions actually flowed through a third-party bridge adapter, and Agora quickly froze the associated Ethereum account to contain potential risks.
Development Team Response and Market Impact
Facing the emergency, Initia initiated chain suspension procedures in coordination with network validators, security teams, and centralized exchanges. The project advised its community to stay vigilant against phishing links spreading during the downtime.
The network’s utility token, INIT, experienced heavy volatility, dropping to as low as $0.115 before staging a modest recovery to around $0.15. At present, the Initia team has not yet released an official post-mortem on the root cause or provided a firm schedule for restoring full network operations.
The incident serves as another clear reminder that complex cross-chain and rollup architectures expand the potential attack surface. When liquidity bridges must manage synthetic assets across disparate virtual machines, a single oversight in minting authorization logic can expose an entire project to critical risk.