Hacker mints tokens on Initia Chain, cashes out about $2.6 million
- Published
- Updated
Initia suspended its layer-1 chain and rollups on Oct. 23 after unauthorized token minting was reported, with onchain estimates putting the amount cashed out at about $2.6 million to $2.7 million. Later coverage added that an address tied to the incident moved about 1,135 ETH, while Agora froze an AUSD account linked to the flow of funds.
Key claims & sources
What it means
Initia is a modular layer-1 built on MoveVM, the same virtual machine family that powers Aptos and Sui, designed so independent rollups can share liquidity and security. Infinite-minting bugs are a known failure mode in this class of chain, but what set Oct. 23 apart was the response: validators coordinated to halt block production at 3:41:30 p.m., five seconds before an attacker's 1,135 ETH transfer would have settled, a reaction speed unusual for a chain marketed as decentralized.
Anyone with assets on Initia's L1 or its rollups has been locked out since the halt, unable to transact, withdraw or redeem until validators restart the network, and as of Friday evening Initia had given no timeline. Agora's freeze of an AUSD account that had already swapped 1.4 million AUSD for ETH shows a second layer of recourse: centralized stablecoin issuers can claw back funds even after they leave a chain, which helps victims but means the attacker's remaining liquid assets are not guaranteed to be recoverable.
The speed of the validator-led halt cuts against the industry's own pitch that these chains run without a kill switch; stopping an exploit in five seconds required exactly the kind of coordinated control that decentralization is supposed to replace. Agora's ability to freeze AUSD raises the same question from the other side: a stablecoin that can be frozen on command is safer for recovering stolen funds but is not censorship-resistant in the way its holders might assume.
The open questions are when Initia resumes block production on its L1 and rollups, whether a post-mortem identifies the exact MoveVM flaw that allowed unbacked minting, and whether the frozen 1.4 million AUSD and any remaining ETH from the attacker's wallet get returned to the protocol. A published fix and a concrete restart timestamp would settle whether this was a contained incident; continued silence would harden doubts about Initia's security review process.
Market reaction i
The total crypto market fell 0.2% in the 4 hours after the first headline, after falling 0.9% in the 2 hours before.
48 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 5 months ago | RetoSwap · Malicious proposal incident | $2.7M |
| 6 months ago | RetoSwap · Missing Input Validation incident | $2.7M |
| 8 months ago | SolvBTC · Infinite Mint incident | $2.7M |
| 11 months ago | Aevo · contract vulnerability incident | $2.7M |
| 11 months ago | Ribbon · Improper access control incident | $2.7M |
4308 incidents stored · 657 were as large as this one or larger ($2.7M)