Loading prices…
🩸BEARISH

Initia halts L1 and rollups after attacker mints tokens,…

A security researcher flagged unauthorized minting and roughly $2.6M cashed out, with more funds still in transit and Initia yet to confirm the full loss or technical root cause.

Initia halts L1 and rollups after attacker mints tokens,…
Initia halts L1 and rollups after attacker mints tokens,…

Initia halted its L1 blockchain and all rollups at 15:41 UTC on October 23 following a security incident, with the team working alongside validators, exchanges, and security firms to assess the full scope of the damage. The network remains offline as the investigation continues.

Security researcher @spreekaway separately reported that an attacker had minted tokens without authorization and had already cashed out approximately $2.6 million, with additional funds still described as in transit. Initia has not yet confirmed the loss figure or identified the technical root cause publicly.

Why it matters

Unauthorized minting is among the most severe attack vectors in blockchain security: it bypasses market-driven supply constraints entirely, allowing an attacker to create value from nothing and immediately convert it to liquid assets before the network can respond. The fact that Initia moved to halt both its L1 and rollups simultaneously signals the team believes the vulnerability may be systemic rather than isolated to a single contract or module.

Market impact

With funds still in transit at the time of reporting, the final loss figure could climb beyond the initial $2.6 million estimate. Exchanges have been looped into the incident response, suggesting coordinated efforts to freeze or flag attacker-controlled addresses. Traders and INIT token holders should treat any price action on thin liquidity with caution until Initia publishes a formal post-mortem and confirms the network is safe to resume.

Related tokens
$INIT

Frequently asked questions

  1. Why did Initia halt both its L1 and rollups at the same time?

    Halting both the L1 and all rollups simultaneously suggests the team believes the vulnerability may be systemic rather than isolated to a single contract or module, requiring a full network pause to contain the incident.

  2. How much money has the attacker taken so far?

    Security researcher @spreekaway reported approximately $2.6 million cashed out at the time of reporting, with additional funds still described as in transit, meaning the total loss could climb higher.

  3. What is unauthorized minting and why is it so dangerous?

    Unauthorized minting lets an attacker create tokens without legitimate authorization, bypassing supply constraints entirely. The attacker can immediately convert newly minted tokens to liquid assets before the network can respond.

  4. Has Initia confirmed the loss amount or the cause of the exploit?

    As of the time of reporting, Initia had not confirmed the loss figure or identified the technical root cause publicly. The team said it was investigating alongside validators, exchanges, and security firms.

  5. What should INIT token holders do while the network is halted?

    Holders should treat any price action on thin liquidity with caution and wait for Initia to publish a formal post-mortem confirming the network is safe to resume before making trading decisions.

Source attribution
Aggregated from WuBlockchain · Verified · Last refreshed 1h ago
Open original →