Initia Unauthorized Mint

On October 23, 2026, Initia halted its layer-1 blockchain and its rollups after an attacker exploited a flaw to mint unbacked tokens and bridge the proceeds to Ethereum, cashing out approximately $2.6 million. The network was suspended at 15:41:30 UTC, and the team had not confirmed the full scope or root cause as of the initial disclosure.

What happened

Initia is a Cosmos-based layer-1 that interweaves a central chain with application-specific rollups (its "Minitias") and supports the Move virtual machine alongside other execution environments. According to on-chain analysts, the attacker abused a vulnerability in a Move function to create tokens that were not backed by any collateral.

Security researcher Spreek first flagged unauthorized token minting and estimated that roughly $2.6 million had been cashed out, "with more in flight." The firm D2 Finance reported that the attacker minted 2 million AUSD without sufficient backing, then withdrew about 1.4 million AUSD, 105 ETH, and 1.08 million USDC to Ethereum via cross-chain transfers. The proceeds were consolidated into an Ethereum wallet holding roughly 1,135.5 ETH, valued at about $2.73 million.

Stablecoin issuer Agora disputed that its AUSD had been minted on Initia, saying it operates no smart contracts on the chain and that the incident involved a third-party product using AUSD. Initia's native INIT token briefly fell to about $0.115 before rebounding.

Aftermath

• Initia halted its layer-1 chain and all rollups to stop further minting and outflows, and said its security teams, validators, and exchanges were investigating.
• The team warned users about unofficial links and fake recovery claims, and did not provide a restart timeline, a confirmed loss figure, or a named root cause in its initial statements.
• The minted tokens that remained on Initia (such as synthetic iUSD) could not be redeemed at their stated value, so nominal "minted" totals circulating online were far higher than the amount actually realized on Ethereum.

Why it matters

Initia's incident is a textbook unauthorized-mint exploit: when a privileged minting path can be reached without real collateral, an attacker can manufacture value out of nothing and race to bridge it to a chain the victim cannot freeze. The same pattern drained Cashio, whose infinite-mint bug let an attacker print unbacked CASH on Solana.

It also underlines the risk surface of newer execution environments. Move-based platforms promise stronger resource safety, yet a single logic flaw in a mint path is enough to undermine those guarantees — as the business-logic exploit against Cetus Protocol on Sui showed earlier. Finally, the episode highlights how fast value escapes once it reaches a composable L1: halting the chain stopped new minting, but the funds already bridged to Ethereum were beyond the validators' reach.