{ "version": 1, "event_id": "evt_7c181150da557b5c", "url": "https://xiyu.news/events/evt_7c181150da557b5c/", "json": "https://xiyu.news/api/events/evt_7c181150da557b5c.json", "type": "security_incident", "status": "monitoring", "category": "crypto", "title": { "zh": "【Initia 链疑遭无限铸币攻击，攻击者已套现约 260 万美元】", "en": "【Initia 链疑遭无限铸币攻击，攻击者已套现约 260 万美元】" }, "current_state": { "zh": "Initia L1 主网及所有 Rollup 仍处于暂停状态；官方已确认漏洞为 MoveVM 脚本缓存漏洞，攻击者伪造状态转出约 270 万美元资产，相关代币总供应量未受影响；安全修复预计数日内完成并通过审计，资产追回进行中，完整事后复盘报告尚未发布。", "en": "Initia's L1 mainnet and all Rollups remain paused; the official disclosure confirms a MoveVM script-caching vulnerability was used to forge state and move about $2.7M, with related token total supply unaffected; a fix is expected within days and will be audited, asset recovery is ongoing, and a full postmortem has not yet been published." }, "first_seen_at": "2026-10-23T17:21:46.311242+00:00", "last_updated_at": "2026-10-24T13:41:49.852808+00:00", "last_material_change_at": "2026-10-24T13:41:49.852808+00:00", "confidence": 0.75, "updates_count": 5, "sources_count": 7, "entities": [ "init", "initia", "movevm", "rollup" ], "identifiers": [], "topics": [ "blockchain-halt", "chain-halt", "cosmos-sdk", "cross-chain-bridge", "infinite-mint", "initia", "layer1", "mainnet-halt", "movevm", "movevm-exploit", "network-pause", "protocol-security", "rollups", "security-incident", "stablecoins", "token-minting" ], "updates": [ { "update_id": "upd_76df5f6583cdc7a0", "event_id": "evt_7c181150da557b5c", "occurred_at": "2026-10-23T15:40:15Z", "published_at": "2026-10-23T15:40:15Z", "first_seen_at": "2026-10-23T17:21:46.311242Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "【Initia 链疑遭无限铸币攻击，攻击者已套现约 260 万美元】", "title_en": "【Initia 链疑遭无限铸币攻击，攻击者已套现约 260 万美元】", "what_changed_zh": "安全研究员 spreekaway 指出，Initia 疑似遭遇无限增发漏洞，多个代币被任意增发，攻击者已套现约 260 万美元的 ETH，同时在 Initia 上仍持有约 454 万美元的 iUSD、USDC、AUSD 和 ETH。", "what_changed_en": "Security researcher spreekaway flagged that Initia appears to have suffered an unlimited-mint exploit in which multiple tokens were arbitrarily minted, with the attacker cashing out about $2.6M in ETH while still holding roughly $4.54M in iUSD, USDC, AUSD and ETH on Initia.", "current_state_zh": "安全研究员 spreekaway 指出，Initia 疑似遭遇无限增发漏洞，多个代币被任意增发，攻击者已套现约 260 万美元的 ETH，同时在 Initia 上仍持有约 454 万美元的 iUSD、USDC、AUSD 和 ETH。", "current_state_en": "Security researcher spreekaway flagged that Initia appears to have suffered an unlimited-mint exploit in which multiple tokens were arbitrarily minted, with the attacker cashing out about $2.6M in ETH while still holding roughly $4.54M in iUSD, USDC, AUSD and ETH on Initia.", "detailed_summary_zh": "Security researcher spreekaway flagged that Initia appears to have suffered an unlimited-mint exploit in which multiple tokens were arbitrarily minted, with the attacker cashing out about $2.6M in ETH while still holding roughly $4.54M in iUSD, USDC, AUSD and ETH on Initia.", "detailed_summary_en": "Security researcher spreekaway flagged that Initia appears to have suffered an unlimited-mint exploit in which multiple tokens were arbitrarily minted, with the attacker cashing out about $2.6M in ETH while still holding roughly $4.54M in iUSD, USDC, AUSD and ETH on Initia.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.75, "story_ids": [ "telegram:foresightnews:121199", "telegram:theblockbeats:202110" ], "sources": [ { "url": "https://foresightnews.pro/news/h5Detail/115893", "label": "foresightnews", "source_type": "telegram", "official": false }, { "url": "https://m.theblockbeats.info/flash/373454?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_9fadcbbdbaa87477", "event_id": "evt_7c181150da557b5c", "occurred_at": "2026-10-23T16:03:03Z", "published_at": "2026-10-23T16:03:03Z", "first_seen_at": "2026-10-23T17:21:45.845398Z", "time_precision": "published", "update_type": "response", "material_change": true, "title_zh": "Initia因安全事件暂停L1主网及Rollup运行", "title_en": "Initia因安全事件暂停L1主网及Rollup运行", "what_changed_zh": "Initia 因该安全事件暂停了 L1 主网及所有 Rollup 运行，并正与安全团队、验证者及交易所协作评估影响。", "what_changed_en": "Initia halted its L1 mainnet and all Rollups due to the security incident and is coordinating with security teams, validators, and exchanges to assess the impact.", "current_state_zh": "Initia 在安全事件后已暂停 L1 主网及所有 Rollup，团队正调查影响范围并提醒用户警惕非官方信息。", "current_state_en": "Initia has paused its L1 mainnet and all Rollups following the security incident while the team investigates the impact and warns users about unofficial information.", "detailed_summary_zh": "Initia halted its L1 mainnet and all Rollups as of 23:41:30 (UTC+8) on October 23, 2026 following a security incident, with the team coordinating with security firms, validators, and exchanges to assess the impact and warning users against unofficial links and claims circulating during the outage.", "detailed_summary_en": "Initia halted its L1 mainnet and all Rollups as of 23:41:30 (UTC+8) on October 23, 2026 following a security incident, with the team coordinating with security firms, validators, and exchanges to assess the impact and warning users against unofficial links and claims circulating during the outage.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 8.0, "references": [], "confidence": 0.9, "story_ids": [ "telegram:theblockbeats:202112", "telegram:foresightnews:121204" ], "sources": [ { "url": "https://m.theblockbeats.info/flash/373456?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false }, { "url": "https://foresightnews.pro/news/h5Detail/115898", "label": "foresightnews", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_3da5d1e7baeb2437", "event_id": "evt_7c181150da557b5c", "occurred_at": "2026-10-23T16:25:02Z", "published_at": "2026-10-23T16:25:02Z", "first_seen_at": "2026-10-23T17:21:45.850605Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "Initia联创：漏洞攻击涉及MoveVM，原生代币INIT未受影响", "title_en": "Initia联创：漏洞攻击涉及MoveVM，原生代币INIT未受影响", "what_changed_zh": "Initia 联合创始人 Zon 表示，漏洞可能源于其基于 Cosmos SDK 的 MoveVM 中的 Day 0 漏洞，该漏洞允许攻击者在 Initia L1 上额外铸造代币，但原生代币 INIT 未受影响；在链暂停前，攻击者已通过增发并跨链转移的方式转出价值约 270 万美元的 AUSD、ETH 和 USDC。", "what_changed_en": "Initia co-founder Zon said the incident likely stemmed from a Day 0 vulnerability in its Cosmos SDK-based MoveVM that allowed extra token minting on Initia L1, while the native INIT token was unaffected; roughly $2.7M in AUSD, ETH and USDC was bridged out before the chain was paused.", "current_state_zh": "Initia L1 主网及所有 Rollup 仍处于暂停状态；联合创始人称漏洞可能源于 MoveVM Day 0 漏洞，原生代币 INIT 未受影响，团队仍在调查影响及后续细节。", "current_state_en": "Initia's L1 mainnet and all Rollups remain paused; the co-founder said the exploit likely stemmed from a MoveVM Day 0 vulnerability, the native INIT token was unaffected, and the team is still investigating the impact and further details.", "detailed_summary_zh": "Initia's co-founder said a Day 0 vulnerability in its Cosmos SDK-based MoveVM let an attacker mint extra tokens on Initia L1 and bridge out roughly $2.7M in AUSD, ETH and USDC before the chain was paused, with the native INIT token unaffected.", "detailed_summary_en": "Initia's co-founder said a Day 0 vulnerability in its Cosmos SDK-based MoveVM let an attacker mint extra tokens on Initia L1 and bridge out roughly $2.7M in AUSD, ETH and USDC before the chain was paused, with the native INIT token unaffected.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.0, "references": [], "confidence": 0.96, "story_ids": [ "telegram:theblockbeats:202115" ], "sources": [ { "url": "https://m.theblockbeats.info/flash/373459?from=telegram", "label": "theblockbeats", "source_type": "telegram", "official": false } ] }, { "update_id": "upd_951f478c118d94d9", "event_id": "evt_7c181150da557b5c", "occurred_at": "2026-10-23T18:39:02Z", "published_at": "2026-10-23T18:39:02Z", "first_seen_at": "2026-10-23T21:31:49.568967Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "Initia 在据报漏洞利用导致逾 260 万美元资金流失后暂停区块链", "title_en": "Initia halts blockchain after exploit reportedly drains over $2.6M", "what_changed_zh": "D2 Finance 报告称，攻击者利用 Move 函数漏洞无抵押铸造 200 万 AUSD，并通过跨链转出约 140 万 AUSD、105 ETH 和 108 万 USDC 至以太坊，随后归集约 1,135.5 ETH（约 273 万美元）；INIT 价格短时跌至约 0.115 美元后回升。", "what_changed_en": "D2 Finance reported that the attacker exploited a Move function vulnerability to mint 2 million AUSD without backing and bridged approximately 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum, later consolidating about 1,135.5 ETH (~$2.73M); INIT briefly fell to around $0.115 before rebounding.", "current_state_zh": "Initia L1 主网及所有 Rollup 仍处于暂停状态；团队正与安全团队、验证者和交易所评估影响，尚未公开确认损失规模或精确原因，恢复时间不明；D2 Finance 已披露无抵押 AUSD 铸造及跨链资金流细节。", "current_state_en": "Initia's L1 mainnet and all Rollups remain paused; the team is coordinating with security researchers, validators and exchanges to assess impact, has not publicly confirmed the loss size or precise cause, and the restoration timeline is unclear; D2 Finance has disclosed details of the unbacked AUSD mint and cross-chain fund flows.", "detailed_summary_zh": "Initia halted its layer-1 blockchain and rollups after an attacker exploited unauthorized token minting and drained more than $2.6 million in assets.", "detailed_summary_en": "Initia halted its layer-1 blockchain and rollups after an attacker exploited unauthorized token minting and drained more than $2.6 million in assets.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.9, "story_ids": [ "rss:cointelegraph.com_rss:adff9db565dc2d46" ], "sources": [ { "url": "https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound", "label": "Cointelegraph", "source_type": "rss", "official": false } ] }, { "update_id": "upd_fd9a64ff9a2f6e90", "event_id": "evt_7c181150da557b5c", "occurred_at": "2026-10-24T10:24:23Z", "published_at": "2026-10-24T10:24:23Z", "first_seen_at": "2026-10-24T13:41:49.852808Z", "time_precision": "published", "update_type": "confirmation", "material_change": true, "title_zh": "【Initia 披露攻击细节：MoveVM 缓存漏洞致约 270 万美元被转出】", "title_en": "【Initia 披露攻击细节：MoveVM 缓存漏洞致约 270 万美元被转出】", "what_changed_zh": "Initia 官方披露漏洞为 MoveVM 脚本缓存（script caching）漏洞，攻击者借此绕过安全检查并伪造 MoveVM 状态，记入无实际支撑的 WETH、iUSD/USDC 等资产，相关代币总供应量未发生变化；约 270 万美元资产经 LayerZero、Noble 和 CCTP 转出，随后兑换为 1,135.52 ETH 并存放于以太坊地址 0x358ef0130f7a5aa516dcd81bdc80b18cde41cac8；安全修复预计数日内完成并通过审计，资产追回工作仍在推进，L1 及 Rollup 继续暂停，完整事后复盘报告待发布。", "what_changed_en": "Initia officially disclosed that the exploit was a MoveVM script-caching vulnerability that bypassed security checks and forged MoveVM state to credit unbacked WETH and USDC/iUSD-like assets without changing the related tokens' total supply; about $2.7M was moved out via LayerZero, Noble and CCTP and later consolidated into 1,135.52 ETH held at Ethereum address 0x358ef0130f7a5aa516dcd81bdc80b18cde41cac8; a security fix is expected within days and will be audited, asset recovery is ongoing, L1 and Rollups remain paused, and a full postmortem is pending.", "current_state_zh": "Initia L1 主网及所有 Rollup 仍处于暂停状态；官方已确认漏洞为 MoveVM 脚本缓存漏洞，攻击者伪造状态转出约 270 万美元资产，相关代币总供应量未受影响；安全修复预计数日内完成并通过审计，资产追回进行中，完整事后复盘报告尚未发布。", "current_state_en": "Initia's L1 mainnet and all Rollups remain paused; the official disclosure confirms a MoveVM script-caching vulnerability was used to forge state and move about $2.7M, with related token total supply unaffected; a fix is expected within days and will be audited, asset recovery is ongoing, and a full postmortem has not yet been published.", "detailed_summary_zh": "Initia disclosed that attackers exploited a MoveVM script-caching vulnerability to forge state and drain about $2.7 million in WETH, AUSD0, and USDC, prompting a network-wide pause while fixes and asset recovery proceed.", "detailed_summary_en": "Initia disclosed that attackers exploited a MoveVM script-caching vulnerability to forge state and drain about $2.7 million in WETH, AUSD0, and USDC, prompting a network-wide pause while fixes and asset recovery proceed.", "background_zh": "", "background_en": "", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "", "market_impact_en": "", "importance_score": 7.5, "references": [], "confidence": 0.96, "story_ids": [ "telegram:foresightnews:121219" ], "sources": [ { "url": "https://foresightnews.pro/news/h5Detail/115912", "label": "foresightnews", "source_type": "telegram", "official": false } ] } ] }