【Initia 链疑遭无限铸币攻击，攻击者已套现约 260 万美元】

1. #0110.23
   Initial2026-10-23 15:40 · publication time

   【Initia 链疑遭无限铸币攻击，攻击者已套现约 260 万美元】

   Security researcher spreekaway flagged that Initia appears to have suffered an unlimited-mint exploit in which multiple tokens were arbitrarily minted, with the attacker cashing out about $2.6M in ETH while still holding roughly $4.54M in iUSD, USDC, AUSD and ETH on Initia.

   Source evidence: foresightnews · theblockbeats

2. #0210.23
   Response2026-10-23 16:03 · publication time

   Initia因安全事件暂停L1主网及Rollup运行

   Initia halted its L1 mainnet and all Rollups due to the security incident and is coordinating with security teams, validators, and exchanges to assess the impact.

   State after update: Initia has paused its L1 mainnet and all Rollups following the security incident while the team investigates the impact and warns users about unofficial information.

   Source evidence: theblockbeats · foresightnews

3. #0310.23
   Confirmation2026-10-23 16:25 · publication time

   Initia联创：漏洞攻击涉及MoveVM，原生代币INIT未受影响

   Initia co-founder Zon said the incident likely stemmed from a Day 0 vulnerability in its Cosmos SDK-based MoveVM that allowed extra token minting on Initia L1, while the native INIT token was unaffected; roughly $2.7M in AUSD, ETH and USDC was bridged out before the chain was paused.

   State after update: Initia's L1 mainnet and all Rollups remain paused; the co-founder said the exploit likely stemmed from a MoveVM Day 0 vulnerability, the native INIT token was unaffected, and the team is still investigating the impact and further details.

   Source evidence: theblockbeats

4. #0410.23
   Confirmation2026-10-23 18:39 · publication time

   Initia halts blockchain after exploit reportedly drains over $2.6M

   D2 Finance reported that the attacker exploited a Move function vulnerability to mint 2 million AUSD without backing and bridged approximately 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum, later consolidating about 1,135.5 ETH (~$2.73M); INIT briefly fell to around $0.115 before rebounding.

   State after update: Initia's L1 mainnet and all Rollups remain paused; the team is coordinating with security researchers, validators and exchanges to assess impact, has not publicly confirmed the loss size or precise cause, and the restoration timeline is unclear; D2 Finance has disclosed details of the unbacked AUSD mint and cross-chain fund flows.

   Source evidence: Cointelegraph

5. #0510.24
   Confirmation2026-10-24 10:24 · publication time

   【Initia 披露攻击细节：MoveVM 缓存漏洞致约 270 万美元被转出】

   Initia officially disclosed that the exploit was a MoveVM script-caching vulnerability that bypassed security checks and forged MoveVM state to credit unbacked WETH and USDC/iUSD-like assets without changing the related tokens' total supply; about $2.7M was moved out via LayerZero, Noble and CCTP and later consolidated into 1,135.52 ETH held at Ethereum address 0x358ef0130f7a5aa516dcd81bdc80b18cde41cac8; a security fix is expected within days and will be audited, asset recovery is ongoing, L1 and Rollups remain paused, and a full postmortem is pending.

   State after update: Initia's L1 mainnet and all Rollups remain paused; the official disclosure confirms a MoveVM script-caching vulnerability was used to forge state and move about $2.7M, with related token total supply unaffected; a fix is expected within days and will be audited, asset recovery is ongoing, and a full postmortem has not yet been published.

   Source evidence: foresightnews

All events · Back to the feed