Initia Network Suspended Due to Security Breach
In a significant security breach, Initia has temporarily suspended its layer-1 network and associated rollups after researchers unearthed a vulnerability that allowed for unauthorized token creation and the siphoning of over $2.6 million in cryptocurrency assets. The alarming situation came to light on Friday at 3:41 p.m. UTC when the platform announced the halt in operations via a message on X (formerly Twitter). The Initia team indicated their commitment to working alongside security experts, validators, and cryptocurrency exchanges to assess the damage caused by the exploit.
Details of the Exploit
The initial report of the exploit was made by blockchain security analyst Spreek, highlighting that the attacker had successfully minted tokens illicitly and shifted nearly $2.6 million worth of cryptocurrency into different assets. Following this, D2 Finance, a decentralized finance platform, disclosed that the hacker took advantage of a flaw that allowed them to create 2 million AUSD tokens without adequate backing. They then executed cross-chain transfers to move about 1.4 million AUSD, alongside 105 Ether (ETH) and 1.08 million USDC (USDC), to the Ethereum network.
According to D2 Finance’s findings, the looted assets were later aggregated into a wallet on Ethereum, containing approximately 1,135.5 ETH, valued at around $2.73 million.
The underlying cause of this exploit has been pinned to a vulnerability within a function intended for token movement, which permitted the creation of unbacked tokens that could be traded for legitimate assets on Ethereum.
Impact on Initia’s Token
Initia, designed to facilitate a system of interlinked rollups referred to as Minitias, saw its native token, INIT, experience a fluctuation in value, dropping to approximately $0.115 before rebounding to over $0.15, as per data from CoinGecko. As of the latest information, the token was trading at around $0.1496, marking an increase of about 14% over the previous day.
Uncertain Future
However, Initia has not yet disclosed the full financial repercussions of the exploit or provided detailed information about its root cause. Moreover, it remains uncertain how this incident will affect users or when the network might resume normal operations, and attempts to reach out for further comments through Initia’s official channels were unsuccessful.
