
Initia, a nascent layer-1 blockchain built around application-specific rollups, abruptly halted its base chain and rollups on Oct. 23 after a reported security incident that may have enabled unauthorized token minting and asset transfers.
What happened
- Initia announced the suspension took effect at 2026-10-23 15:41:30 UTC. The team said security personnel, validators and exchanges are investigating and that it will publish only verified updates through official channels. It also warned users to be wary of unofficial links and claims circulating during the probe.
- Independent security researcher Spreek posted that tokens were minted without authorization and that an attacker had cashed out roughly $2.6 million, cautioning that additional funds were “in flight” at the time of the post. That figure was presented as an early estimate.
- Multiple initial analyses have produced differing snapshots of on-chain movements:
- The Defiant reported stablecoin swaps followed by a transfer of 1,135.5 ETH to Ethereum bridges/wallets, and cited Spreek’s $2.6M estimate while not explicitly adding the ETH move on top of that figure.
- An analysis attributed to D2 Finance described 2 million unbacked AUSD tokens being created and withdrawals to Ethereum totaling about 1.4 million AUSD, 105 ETH and 1.08 million USDC.
- The Defiant later reported 1.4 million AUSD leaving a bridge adapter.
- Agora — named in some early reports because a third-party product using AUSD was reportedly involved — said it had no smart contracts deployed on Initia and disputed claims that its stablecoin had been minted on the Initia chain.
Why the totals are unclear
- The various numbers circulated so far come from separate on-chain observations and early platform accounts. They have not been reconciled into a single, confirmed loss figure and may overlap (for example, bridge transfers and stablecoin swaps could be double-counted). Initia’s official statement did not quantify losses, name affected applications, or give a restart timetable.
Context on Initia
- Initia’s architecture centers on a base blockchain with interwoven, application-specific rollups. The startup raised $7.5 million in seed funding in February 2024 in a round co-led by Delphi Ventures and Hack VC, with participation from Nascent and Figment Capital. The funding was intended to support testnet work planned for early 2024.
- Since then Initia has been involved in ecosystem efforts and partnerships:
- In July 2024, Initia Labs and LayerZero Labs announced plans to build an interoperability standard for Cosmos SDK chains and other LayerZero-enabled networks.
- In November 2024, lending protocol Echelon announced a Move appchain built on Initia’s Interwoven Stack and Celestia modular tech, touting native USDC, enshrined oracles, LayerZero onboarding and atomic cross-chain composability. Echelon’s roadmap previously cited over $100 million in total value locked and $132 million in borrowed assets during its development timeline.
What’s next
- The situation remains fluid. Initia says it is working with security teams, validators and exchanges to determine the full scope of the impact and will publish verified information when available. Users and projects built on Initia should treat unofficial reports cautiously until a formal reconciliation is released.
We’ll monitor the investigation and report confirmed findings as Initia and outside teams publish forensic results.
What happened
- Initia announced the suspension took effect at 2026-10-23 15:41:30 UTC. The team said security personnel, validators and exchanges are investigating and that it will publish only verified updates through official channels. It also warned users to be wary of unofficial links and claims circulating during the probe.
- Independent security researcher Spreek posted that tokens were minted without authorization and that an attacker had cashed out roughly $2.6 million, cautioning that additional funds were “in flight” at the time of the post. That figure was presented as an early estimate.
- Multiple initial analyses have produced differing snapshots of on-chain movements:
- The Defiant reported stablecoin swaps followed by a transfer of 1,135.5 ETH to Ethereum bridges/wallets, and cited Spreek’s $2.6M estimate while not explicitly adding the ETH move on top of that figure.
- An analysis attributed to D2 Finance described 2 million unbacked AUSD tokens being created and withdrawals to Ethereum totaling about 1.4 million AUSD, 105 ETH and 1.08 million USDC.
- The Defiant later reported 1.4 million AUSD leaving a bridge adapter.
- Agora — named in some early reports because a third-party product using AUSD was reportedly involved — said it had no smart contracts deployed on Initia and disputed claims that its stablecoin had been minted on the Initia chain.
Why the totals are unclear
- The various numbers circulated so far come from separate on-chain observations and early platform accounts. They have not been reconciled into a single, confirmed loss figure and may overlap (for example, bridge transfers and stablecoin swaps could be double-counted). Initia’s official statement did not quantify losses, name affected applications, or give a restart timetable.
Context on Initia
- Initia’s architecture centers on a base blockchain with interwoven, application-specific rollups. The startup raised $7.5 million in seed funding in February 2024 in a round co-led by Delphi Ventures and Hack VC, with participation from Nascent and Figment Capital. The funding was intended to support testnet work planned for early 2024.
- Since then Initia has been involved in ecosystem efforts and partnerships:
- In July 2024, Initia Labs and LayerZero Labs announced plans to build an interoperability standard for Cosmos SDK chains and other LayerZero-enabled networks.
- In November 2024, lending protocol Echelon announced a Move appchain built on Initia’s Interwoven Stack and Celestia modular tech, touting native USDC, enshrined oracles, LayerZero onboarding and atomic cross-chain composability. Echelon’s roadmap previously cited over $100 million in total value locked and $132 million in borrowed assets during its development timeline.
What’s next
- The situation remains fluid. Initia says it is working with security teams, validators and exchanges to determine the full scope of the impact and will publish verified information when available. Users and projects built on Initia should treat unofficial reports cautiously until a formal reconciliation is released.
We’ll monitor the investigation and report confirmed findings as Initia and outside teams publish forensic results.
