Initia's Layer-1 Blockchain Suspended Again Amid Security Breach, While INIT Token Surges Over 60%

Initia's Blockchain Suspension Due to Security Breach

Initia's layer-1 blockchain has been suspended for the second time in under three weeks following a serious security breach that involved unauthorized transfers via compromised rollup infrastructure keys. The disruption occurred on November 10 at 06:18 UTC as the development team collaborated with network validators to prevent additional unauthorized transactions. This event comes on the heels of an earlier attack, with the recent exploit resulting in approximately $605,000 in USDC and another $10,000 in various tokens being siphoned from the network through Noble before the halt.

Details of the Attack

According to Initia’s investigation, attackers managed to access escrow accounts which stored assets bridged from Initia’s main blockchain to its various connected rollups. They exploited compromised keys to fabricate Inter-Blockchain Communication (IBC) transfers, facilitating the illicit movement of funds without proper authorization. However, the exact methods used to obtain these credentials remain unclear, and the team has not disclosed the identity of the individuals or entities behind the attack.

Blockchain security firm CertiK provided a larger estimate of the stolen funds, reporting around $636,000 transferred from Initia’s address through successful IBC transactions, which surpasses Initia’s initial assessment of $615,000.

The amount ultimately unrecoverable is yet to be determined, as an investigation continues into the matter. In light of these events, Initia is working alongside security experts, validators, and cryptocurrency exchanges to analyze the full implications of the incident. However, there has been no announcement regarding when the blockchain’s operations will resume, nor any indication of whether users affected by the breach will be compensated.

Previous Incident and Response

This incident follows a previous disruption on October 23, attributed to unauthorized token generation that led to an estimated $2.6 million being transferred out of Initia’s ecosystem. The initial breach was traced to a vulnerability in its MoveVM script-caching, which allowed an attacker to bypass security protocols and manipulations, resulting in the unauthorized creation of assets. The attacker exploited the loophole to convert approximately $2.7 million before the network was paused by validators. Importantly, the total supply of Initia's native INIT tokens was unaffected during this earlier breach.

Following a fix to the MoveVM system, Initia resumed regular operations on November 2. However, on November 9, they had already reported issues affecting their rollup infrastructure and assured users that there was no detected impact to their funds. Just a day later, the situation escalated, leading to the identification of unauthorized escrow transfers and the necessary network suspension.

Market Response

Notably, despite these setbacks, Initia's native token has experienced a spike of over 60%, rising to approximately $0.2057, with trading volume hitting about $84.81 million and a market cap hovering around $46.37 million. This surge saw the price increase from about $0.12 to over $0.23 in a single trading window.

As of now, Initia cautions users against engaging with unofficial links or correspondence during the ongoing investigation, promising to release more information as it becomes available.