Initia, a layer-1 blockchain focused on supporting interconnected rollups known as Minitias, suspended its main network and rollups on Friday following a significant security breach that resulted in the unauthorized minting of tokens and the theft of more than $2.6 million in crypto assets.
Exploit details and immediate response
Initia halted network activity at 3:41 p.m. UTC on Friday after reports of an exploit surfaced. The project team announced the pause publicly on X, stating that they are working with security researchers, validators, and partner exchanges to assess the situation and determine the full extent of the losses.
The exploit was first identified by Spreek, a blockchain security analyst, who flagged that an attacker had been able to mint tokens without proper authorization. Using this method, the attacker was able to convert roughly $2.6 million worth of assets, and additional funds were reportedly still being moved through various addresses.
DeFi platform D2 Finance later reported that the vulnerability permitted the attacker to mint 2 million AUSD tokens that lacked sufficient backing. The attacker then leveraged cross-chain transfers to extract approximately 1.4 million AUSD, 105 Ether (ETH), and 1.08 million USDC onto the Ethereum blockchain.
The bulk of the stolen funds were consolidated into a single Ethereum wallet, which reached a balance of about 1,135.5 ETH, valued at $2.73 million, according to D2 Finance. The firm linked the exploit to a vulnerability in a Move function, enabling the unauthorized creation of unbacked tokens and their subsequent swap for established assets like ETH and USDC on Ethereum.
Mini dictionary: Move function — Move is a smart contract programming language originally developed by Meta for its blockchain projects. In this exploit, the vulnerability was related to the Move function, which governs how tokens can be created or transacted on-chain.
The vulnerability in the Move function allowed the attacker to mint unbacked tokens, later exchanged for other popular assets on Ethereum through cross-chain mechanisms.
Market impact and ongoing investigation
INIT, the native token of Initia, saw its price fall sharply to roughly $0.115 immediately after the incident but quickly recovered above $0.15 the same day, according to data from CoinGecko. By the end of the reporting period, INIT was trading near $0.1496, marking a 14% recovery over the previous 24 hours.
Initia has yet to publicly confirm the total losses or the exact cause of the exploit. Questions remain about how users will be affected and how long the network will remain suspended while the team investigates. The project’s official X account has not provided additional details regarding the breach or plans for reactivating the blockchain.
Initia’s team is collaborating with external researchers and exchanges, but the impact on users and the timeline for restoring network operations remains uncertain.
At this stage, the project has not released any statement regarding compensation for affected holders or specific remediation steps. Calls for further transparency are circulating across the crypto community as observers look to see whether Initia can reestablish trust and resume its operations.
