Initia halts blockchain after exploit reportedly drains over $2.6M

Initia stopped its layer-1 blockchain and its rollups after researchers reported a security exploit. The attacker allegedly created tokens without authorization and converted them into valuable crypto assets. Halting the network limited further transactions while Initia worked with researchers, validators and exchanges to assess the incident.

Spreek first flagged the attack. D2 Finance later reported that the attacker minted 2 million AUSD without enough backing. Cross-chain transfers then moved about 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum. The assets were consolidated in an Ethereum wallet holding about 1,135.5 ETH.

The full impact remains unclear. Initia has not confirmed the estimated losses or the precise technical cause. Its token briefly fell to about $0.115 before recovering above $0.15, while network restoration and possible user effects were still uncertain.

A layer-1 blockchain is a base network that processes transactions and provides the underlying infrastructure for applications and connected systems. Initia was designed to support many interconnected rollups, which the article calls Minitias. Its role is to provide the main blockchain environment around which these linked networks operate.

Minitias are rollups connected to Initia rather than completely separate projects. Rollups generally handle activity in a linked environment and use connections to transfer information or assets. In this incident, Initia halted both its own layer-1 network and its rollups, showing that the security concern affected the broader connected system.

The article does not describe the precise technical design or division of responsibilities between Initia and each Minitia. It does establish that the network’s interconnected structure is central to its purpose. Because the systems are linked, a serious vulnerability can require coordinated action across the main chain, rollups, validators and exchanges.

The reported stolen value was more than $2.6 million, although Initia had not publicly confirmed the estimate. The assets involved included approximately 1.4 million AUSD, 105 Ether and 1.08 million USDC. D2 Finance said the attacker first minted 2 million AUSD without sufficient backing.

The attacker used cross-chain transfers to move about 1.4 million AUSD, 105 ETH and 1.08 million USDC from Initia to Ethereum. D2 Finance said the assets were later consolidated into an Ethereum wallet holding approximately 1,135.5 ETH. That wallet was valued at about $2.73 million in the report.

The figures describe reported movements, not a final independently confirmed loss total. Initia said it was working with security researchers, validators and exchanges to determine the full impact. Additional funds were reportedly still being moved when the incident was first identified, so the eventual total could remain uncertain.

A blockchain exploit can affect users in several ways. Halting the network may temporarily prevent transactions, deposits or withdrawals, while investigators work to stop further losses. Unauthorized token creation can also weaken confidence because the supply and asset backing may no longer be reliable. These are general consequences; the article does not confirm every effect on Initia users.

Initia suspended its layer-1 network and rollups at 3:41 p.m. UTC on Friday. Its native INIT token briefly fell to around $0.115 before rebounding above $0.15. The reported exploit involved unbacked AUSD and transfers of assets to Ethereum, adding pressure to the network’s credibility and operations.

The longer-term outcome was still unknown. Initia had not confirmed the estimated losses or precise cause, and the timeline for restoring operations remained unclear. The team was coordinating with researchers, validators and exchanges, so future steps could depend on the investigation and the ability to secure the network.

A token is backed when reserves or other assets are meant to support its stated value or redemption. According to D2 Finance, the vulnerable Move function failed to enforce that requirement. It allowed the attacker to create AUSD even though the necessary backing was absent. That changed the token from a properly supported asset into an unbacked claim.

The reported sequence was direct. The attacker minted 2 million AUSD without sufficient backing, then used cross-chain transfers to withdraw about 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum. The attacker effectively exchanged newly created tokens for assets that already had value elsewhere.

D2 Finance attributed the exploit to the Move-function vulnerability, but Initia had not publicly confirmed the precise cause. The incident shows why minting rules matter: if code does not enforce supply and backing conditions, an attacker may create tokens and drain reserves or connected markets. The final impact was still under investigation.

Cross-chain transfers connect separate blockchain networks and allow assets or token representations to move between them. In general, a bridge or similar system verifies activity on one chain and releases, locks or represents assets on another. That connection can also create an attack path if the originating tokens were minted improperly or the transfer system accepts them.

D2 Finance reported that the attacker used cross-chain transfers to withdraw approximately 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum. The assets were later consolidated into an Ethereum wallet holding about 1,135.5 ETH. Moving to Ethereum gave the attacker a destination for combining the allegedly stolen assets.

The article does not name a particular bridge or explain its exact controls. It also does not say that the transfer mechanism itself was vulnerable. The reported sequence instead links unauthorized AUSD minting with cross-chain movement, showing how connected networks can transmit the effects of a token-creation flaw.

A cryptocurrency token is backed when assets, reserves or another defined mechanism are intended to support its value or redemption. Backing gives users a reason to believe the token represents something with recoverable value. The article says AUSD was minted without sufficient backing, meaning the new tokens were created without the support expected for them.

That matters because unauthorized tokens can be presented to markets or connected systems as if they were legitimate. In this case, D2 Finance reported that 2 million AUSD were minted, and about 1.4 million AUSD was later withdrawn to Ethereum along with ETH and USDC. The attacker could therefore turn unsupported tokens into assets with established value.

This process can dilute legitimate holders and make redemption or valuation less reliable. It can also damage trust in the network’s code and oversight. Initia had not publicly confirmed the precise cause or losses, so the final consequences remained uncertain. The reported vulnerability nevertheless shows why supply and backing checks are essential.