Hacker mints tokens on Initia Chain, cashes out about $2.6 million
Published Updated 4 new reports since it was first published
Initia halted its L1 and rollups after a reported mint exploit, while onchain records showed large ETH movements tied to the incident. Agora then said an account linked to the event had already swapped 1.4 million AUSD for ETH, and it later said the exploit involved a third-party product using AUSD rather than an Agora contract on Initia.
What this rests on
What it means
Initia is a layer-1 network with rollups, and the event unfolded as the project paused both parts of its system after a reported mint exploit. A mint exploit on a chain like this raises immediate questions about how tokens are created and moved inside the network’s own infrastructure. The fact that the response came through a halt shows how quickly a protocol can move from normal operation to containment mode when token issuance is disputed.
For users and builders on Initia, the practical effect is a stop in network activity while the incident is reviewed and the scope is checked. The transfers tied to the event show that assets can be moved across chains even as a protocol is trying to assess what happened. Agora’s freeze of an AUSD account adds a layer of issuer intervention that holders of the stablecoin and integrators now have to account for. (per theblock.co)
The wider tension is between open-chain composability and the ability of a stablecoin issuer to intervene when an address becomes linked to an exploit. Agora’s statement that the activity involved a third-party product using AUSD, rather than an Agora contract on Initia, puts the focus on integration risk across separate systems. That kind of setup can spread responsibility across a chain, a bridge adapter, and a stablecoin issuer, which makes incident handling messier for everyone involved.
What is still open is the exact path the minted tokens took, how much value moved in total, and which component of the stack failed first. The reported cash-out estimate and the later ETH transfers show money moved, but they do not settle who controlled each step of the sequence. A fuller account would need the chain data around the mint event itself, the affected contract or adapter, and any recovery actions that follow. (per cryptobriefing.com)
Market reaction
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
How the story was built
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 4.6 years ago | Fantasm Finance · Missing Input Validation incident | $2.6M |
| 2.6 years ago | Fake Ansem incident | $2.6M |
| 5.2 years ago | Fetch.ai · Hacked account incident | $2.6M |
| 5.4 years ago | Fetch.ai incident | $2.6M |
| 1.1 years ago | Nemo Yield Trading · Improper Access Control incident | $2.6M |
4221 incidents stored · 653 were as large as this one or larger ($2.6M)