Hacker mints tokens on Initia Chain, cashes out about $2.6 million

HACK OR EXPLOITHacker mints tokens on InitiaChain, cashes out about $2.6million65IMPORTANCEACTIVE3NEWS MEDIA5PIECESOct 23, 2026 15:42blockboard.net

Published Updated 4 new reports since it was first published

Initia halted its L1 and rollups after a reported mint exploit, while onchain records showed large ETH movements tied to the incident. Agora then said an account linked to the event had already swapped 1.4 million AUSD for ETH, and it later said the exploit involved a third-party product using AUSD rather than an Agora contract on Initia.

What this rests on

Claim by claim, with its source
✓
Initia halted its L1 and rollups after a reported mint exploit.
✓
Onchain data showed a $2.7 million ether transfer as Initia examined the security incident.
✓
Agora froze an AUSD account linked to the Initia exploit after saying the account had already swapped 1.4 million AUSD for ETH.

What it means

Initia is a layer-1 network with rollups, and the event unfolded as the project paused both parts of its system after a reported mint exploit. A mint exploit on a chain like this raises immediate questions about how tokens are created and moved inside the network’s own infrastructure. The fact that the response came through a halt shows how quickly a protocol can move from normal operation to containment mode when token issuance is disputed.

For users and builders on Initia, the practical effect is a stop in network activity while the incident is reviewed and the scope is checked. The transfers tied to the event show that assets can be moved across chains even as a protocol is trying to assess what happened. Agora’s freeze of an AUSD account adds a layer of issuer intervention that holders of the stablecoin and integrators now have to account for. (per theblock.co)

The wider tension is between open-chain composability and the ability of a stablecoin issuer to intervene when an address becomes linked to an exploit. Agora’s statement that the activity involved a third-party product using AUSD, rather than an Agora contract on Initia, puts the focus on integration risk across separate systems. That kind of setup can spread responsibility across a chain, a bridge adapter, and a stablecoin issuer, which makes incident handling messier for everyone involved.

What is still open is the exact path the minted tokens took, how much value moved in total, and which component of the stack failed first. The reported cash-out estimate and the later ETH transfers show money moved, but they do not settle who controlled each step of the sequence. A fuller account would need the chain data around the mint event itself, the affected contract or adapter, and any recovery actions that follow. (per cryptobriefing.com)

Market reaction

TO Total crypto market no single asset in the event: read against the whole market from 2 h before to 4 h after the line marks the first headline
published
-0.94 % before publication
+0.33 % after
$2.7Tmarket cap at publication
10series points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 23 15:38
Crypto Briefing scoop
Breaks the event: $2.6M
+41 min
Oct 23 16:19
The Defiant context
Its angle: stablecoin, estimated, reported
+1 h 26 m
Oct 23 17:03
+1 h 30 m
Oct 23 17:08
The Defiant adds
Brings into the story: AUSD, with quotes
+1 h 49 m
Oct 23 17:27
The Defiant echo
No new facts: deployed, product, adapter; with quotes

Thefts of a similar size

WhenWhat happenedFigure
4.6 years ago Fantasm Finance · Missing Input Validation incident $2.6M
2.6 years ago Fake Ansem incident $2.6M
5.2 years ago Fetch.ai · Hacked account incident $2.6M
5.4 years ago Fetch.ai incident $2.6M
1.1 years ago Nemo Yield Trading · Improper Access Control incident $2.6M

4221 incidents stored · 653 were as large as this one or larger ($2.6M)