Initia Pauses Layer 1 and Rollups After Reported $2.6 Million Exploit

A halt turns a token bug into a cross-chain incident

Initia’s decision to stop its layer-1 network and rollups shows how a flaw in token issuance can quickly become a cross-chain liquidity event. Security researchers reported that an attacker minted tokens without authorization and moved millions of dollars in assets to Ethereum. The halt limits activity while the team assesses the incident, but it doesn’t by itself establish how much value was lost or which users were affected.

That distinction matters. A token created without sufficient backing can be traded or bridged before a project responds, turning a software vulnerability into a problem that spans multiple networks. Once assets reach another chain, tracing and coordinating a response can become more complicated. The available reports describe transfers and a wallet balance, but Initia hasn’t confirmed the full path or final impact.

Reported token minting and asset transfers

Initia said in a post on X that it halted the network at 3:41 p.m. UTC on Friday after a security incident. The team said it was working with security researchers, validators and exchanges to assess the impact. That response brings together parties with different roles: researchers can investigate the flaw, validators help manage network operations, and exchanges may need to assess activity involving affected assets.

Researcher Spreek first flagged the incident, reporting unauthorized token minting and the conversion of about $2.6 million into other assets, with further transfers underway. The report framed the situation as active rather than contained. In incidents involving rapidly transferable tokens, the sequence matters: early estimates can change as transactions are identified and assets are converted or moved again.

DeFi platform D2 Finance later reported that a vulnerability enabled the attacker to mint 2 million AUSD without sufficient backing. The attacker then used cross-chain transfers to move about 1.4 million AUSD, 105 Ether (ETH) and 1.08 million USDC to Ethereum. Those figures describe reported transfers; they shouldn’t be treated as a confirmed accounting of losses or recovered funds.

According to D2 Finance, the assets were consolidated in an Ethereum wallet holding about 1,135.5 ETH, valued at $2.73 million. The firm linked the incident to a vulnerability in a Move function that could create unbacked tokens and exchange them for assets on Ethereum. This is the point that makes the report more than a localized token issue: if an attacker can create claims without matching collateral, then trade or bridge them for assets with market value, the weakness can reach systems beyond the original chain.

Network status and token response

Initia is a layer-1 blockchain built to support interconnected rollups called Minitias. Its INIT token briefly fell to about $0.115 on Friday before climbing above $0.15. CoinGecko data showed it near $0.1496 at the time of writing, up about 14% over 24 hours. That price movement offers little evidence about whether the technical problem is resolved: a market price can rebound while questions about the network, user balances and restart timing remain open.

Initia hasn’t confirmed the estimated losses or the precise cause. The impact on users and the schedule for restarting network operations also remain unclear. Cointelegraph said it couldn’t reach Initia for further comment through the project’s official X account. Until the team publishes a fuller account, the technical explanation and damage estimates should be understood as reports from outside parties, not as a final incident review.

What the incident leaves unresolved

This is more significant than it looks because the reported path joined token creation, asset conversion and cross-chain transfers in one sequence. (And this is the part most people overlook.) A network halt may interrupt activity on the affected chain, but it doesn’t automatically reverse transfers that have already reached Ethereum. The practical response depends on what the investigation confirms and how the relevant services handle the assets.

If you’re working in this space, the central question is whether the reported Move function could be reached through a wider set of operations or whether the issue was confined to a specific path. The source material doesn’t answer that. Nor does it say whether the attacker still controls the reported wallet, whether any funds have been recovered, or when Initia expects to resume operations.

For now, the clearest account is also a limited one: Initia halted its network, researchers described unauthorized minting, and D2 Finance traced reported transfers to Ethereum. The next useful update will need to connect those facts to a confirmed cause, a user impact assessment and an explanation of the recovery process. Until then, the token’s price rebound is a weak proxy for the questions users actually need answered.

Magazine: New DeepSeek ban in US, Swiss-Asia crypto ties deepen: Asia Express

Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries.

All news, reviews, and analyses are produced with full journalistic independence and integrity. For more details on our standards and processes, please read our Editorial Policy.