Initia Halts Layer 1 and Rollups After $2.7 Million Exploit

Initia halted its Layer 1 blockchain and modular roll-ups after an alleged exploit consolidated 1,135.52 ETH, then worth about $2.73 million, in a newly created wallet, AMBCrypto reported.

The report dates the incident to October 23 and places the first transaction at 14:59:26 UTC. It describes Initia as a Layer 1 blockchain and an interwoven modular roll-up network with cross-chain infrastructure used to reach Ethereum.

What happened in the alleged exploit?

At 14:59:26 UTC, the reported attacker used one signed transaction to mint 2 million AUSD tokens without authorization. The tokens came through a flaw in Initia's minting mechanism rather than through the normal cross-chain bridge message process.

According to the investigation, the transaction “called a ‘Move’ function directly” and consumed 135,888 gas. No cross-chain message was required, which meant the reported attacker did not need to defeat bridge verification before creating the assets.

The account provides no transaction hash, block number, or named investigator, so the stated sequence remains dependent on the published investigation. It also identifies no attacker, arrest, regulatory action, or court filing, leaving responsibility and legal recourse unresolved.

The reported failure began with unauthorized token creation, not an ordinary compromise of bridge verification.

How did the assets leave Initia?

About 153 seconds after the initial mint, a valid LayerZero message enabled the release of 1.4 million AUSD from the Ethereum-side adapter. The attacker then used the same cross-chain infrastructure to convert the reported proceeds into assets on Ethereum.

The reported attacker also withdrew 105 ETH from the native-ETH adapter and obtained 1.08 million USDC through Circle's Cross-Chain Transfer Protocol, known as CCTP. Researchers said the attacker converted the funds through decentralized trading services, including 1inch and 0x.

Within approximately seven minutes of the mint, around $2.65 million had reached Ethereum. The report later valued the consolidated balance at 1,135.52 ETH, or approximately $2.73 million, and placed it in a newly created wallet.

The source does not reconcile the $2.65 million seven-minute figure with the later $2.73 million valuation. It also provides no wallet address or evidence that any proceeds have been recovered.

The reported route turned an internal minting failure into cross-chain losses.

What did the network halt accomplish?

Initia stopped both its Layer 1 blockchain and its roll-ups following the incident. The response covered the base chain and the modular network, rather than only the Ethereum adapters named in the reported transaction sequence.

The published account gives no restart timetable, service-level assessment, or explanation of how users could withdraw or access funds while the network remained stopped. It also does not specify whether the Layer 1 chain and each roll-up resumed on the same schedule.

AMBCrypto compared the incident with September's Liquid Network exploit, where a software bug enabled the creation of unauthorized L-BTC and the withdrawal of real Bitcoin. That similarity identifies a recurring category of token-minting failure, but it does not establish common code, infrastructure, or responsibility.

The shutdown contained the response, while the report leaves recovery and network restoration unresolved.

What does the market data show?

Despite the shutdown and reported losses, Initia's INIT token traded at $0.1484 at press time, up 11.7% over the previous 24 hours. The price move does not establish that the exploit had been contained, that affected users had regained access, or that the reported proceeds had been secured.

AMBCrypto also cited a recent assessment that crypto security losses rose 55% to $1.18 billion in the third quarter of 2026. Reported incidents increased from 67 to 107 during that period, a net rise of 40 cases.

The quarterly loss total was more than 400 times Initia's reported $2.73 million loss, although aggregate figures include incidents of different scales and methodologies. The broader data indicate that Initia was one instance within a rising quarterly volume of reported losses, not evidence by itself of a systemic Initia failure.

The token's short-term rise did not erase the operational risk, even as quarterly losses increased sharply.

What happens next?

The published account offers no restoration deadline, patch timetable, or confirmed recovery route for the reported funds. The next verifiable checkpoint would be an Initia disclosure covering the minting-path fix, transaction-level findings, and a restart schedule.

Until those details emerge, affected users have no stated restoration deadline, and the cross-chain pathway remains exposed until the vulnerable route is patched or permanently disabled.