Logo Daily Crypto Briefs
Open menu

Initia Halts Network After $2.73M Bridge Drain

5 min read
One large official white Initia icon and lowercase wordmark on a charcoal stone sign beside an unbranded greyscale broken bridge, against off-white, rust-red and deep-petrol panels.

TL;DR

  • Initia halted its L1 and rollups at 15:41:30 UTC on October 23 after a security incident.
  • Bitquery estimated $2.73 million escaped through bridge reserves; $7.48 million in unbacked tokens is a different measure.
  • The co-founder said native INIT was outside the minting flaw; final losses, victim counts and a verified restart remained unconfirmed.

October 24, 2026

Initia halted its main blockchain and connected rollups on October 23 after an attacker reportedly drained approximately $2.73 million through bridge reserves, interrupting network activity while investigators assessed unauthorized token minting.

The project put the suspension at 15:41:30 UTC. Its announcement, reproduced by CoinMarketCap, said security teams, validators and exchanges were helping establish the scope of the incident. The notice did not provide a final loss tally.

The clearest distinction in the available evidence is between tokens created and assets removed. Bitquery’s investigation estimated $7.48 million in unbacked tokens at face value, but $2.73 million paid out in real assets. Its wallet observations were timestamped 18:52 UTC on October 23.

INIT traded near $0.1496, about 14% higher over 24 hours after briefly falling toward $0.115, in Cointelegraph’s incident snapshot. That dated rebound does not establish that the network had recovered or that bridge claims could be redeemed.

Initia bridge drain leaves withdrawals in question

Bitquery traced the outflows to three bridge reserves. It reported that Noble’s USDC reserve for Initia fell from approximately $1.09 million to $63, including withdrawals by other users, while the ether and AUSD reserves lost 96% and 71%, respectively.

The firm counted 55 failed ordinary USDC withdrawal attempts before the halt, mostly repeated submissions by one bot. Those are failed transactions, not 55 identified victims. A verified count of affected people or wallets was not established.

This separates an operational interruption from a financial shortfall. Halting a blockchain can stop additional activity on that ledger, but it cannot by itself reverse a completed transfer on another network. A displayed token balance also does not establish how much backing remains available for redemption.

Initia’s official documentation describes an infrastructure stack supporting application-specific rollups and interoperability. The coordinated halt therefore reaches beyond a single trading pool: applications relying on those networks must await operational updates as well as an accounting of the affected assets.

Daily Crypto Briefs previously covered NEAR Intents’ restart with chain restrictions. That separate incident illustrates the distinction between restoring a service and reopening every transfer route; its recovery outcome should not be assumed for Initia.

Bitcoin’s completed October 23 UTC session closed at $81,078.04, down 0.282%, with a range of $80,401.34 to $82,102, according to ChartExchange. The chart provides wider market context, without attributing Bitcoin’s movement to the Initia incident.

Bitcoin

BTC
Sep. 23-Oct. 23, 2026
$81,078
-3.9%
Sep 23 - Oct 23 | High $85,856 • Low $81,078

Source: ChartExchange, sampled completed UTC closes checked October 24. The unfinished October 24 session is excluded.

MoveVM minting report excludes native INIT

Co-founder Ezaan Mangalji, known as Zon, attributed the incident preliminarily to a previously unknown flaw in Initia’s MoveVM implementation on Cosmos SDK, The Block reported. He said the flaw did not apply to native INIT and estimated that approximately $2.7 million in AUSD, ETH and USDC had been minted and bridged out before the pause.

The characterization remains preliminary. A final technical report would need to establish the failed authorization check, affected software versions and repair. The statement about INIT concerns the minting mechanism; it does not mean holders could continue normal network transactions during a halt.

Researcher Spreek initially put assets cashed out at approximately $2.6 million, with additional funds in transit. The early figure and subsequent estimates describe overlapping proceeds, rather than separate thefts to add together.

An Ethereum transaction recorded by Etherscan shows a successful transfer of 1,135.52 ETH at 15:41:35 UTC from the address identified by investigators to 0x358eF0130f7A5aA516dCd81Bdc80B18CdE41CAC8. The transfer is observable; attribution to the exploit relies on the investigators’ tracing.

The consolidation is another movement of the reported proceeds, not another $2.73 million loss. Its dollar valuation changes with ether’s price, so the ETH amount and the investigation’s stated valuation time are more useful than combining differently timed dollar readings.

Agora separates AUSD backing from bridge exposure

Agora said its AUSD contract was not deployed on Initia and that no issuer-controlled AUSD had been minted there, according to its statement reported by CoinMarketCap. It described an affected third-party product using AUSD on Ethereum and said its own stablecoin remained fully backed.

An issuer’s reserve backing and the collateral available to a bridge are different obligations. An unauthorized representation can generate a claim against a bridge’s assets without compromising the issuer’s minting contract. Describing this simply as an AUSD issuance failure would obscure where the reported losses arose.

The 0xCERT incident advisory, citing D2 Finance’s analysis and correction, likewise distinguishes the third-party AUSD adapter’s depositors from Agora’s issuance system. A final reconciliation must still establish liabilities after any recoveries, blocked transfers or replenishment.

Upbit separately suspended INIT deposits and withdrawals, CoinMarketCap reported. Reopening exchange transfers would require its own notice, even if validators subsequently restored the chain. A price quoted on an exchange is not evidence that deposits can settle.

The distinction also appeared in earlier coverage of MANTRA’s chain halt, where identifying the affected wallets was essential to understanding exposure. Initia has yet to supply a comparable final account of individual losses.

Fear & Greed Index

October 24, 2026
51 Neutral

Alternative.me’s index showed 51, or Neutral, versus 50 the previous day when checked October 24. This is broad Bitcoin sentiment, rather than a measure of Initia’s solvency.

As of the 02:59 UTC review on October 24, the materials checked did not establish a verified restart, final net loss, victim count, completed reimbursement or second attack wave. The next consequential updates are a technical explanation, asset-by-asset reserve accounting and confirmed withdrawal arrangements.

Stay up to date

Get the latest crypto insights delivered to your inbox

Fact-checked by: Daily Crypto Briefs Fact-Check Desk

Frequently Asked Questions

How much was stolen in the Initia hack?

Bitquery estimated $2.73 million in real assets escaped through bridge reserves, using its October 23 investigation and 18:52 UTC wallet check. This is an analytics estimate, not a final audited loss total.

Was $7.48 million stolen from Initia?

That figure is Bitquery's face-value estimate of unbacked tokens created. It is not the amount successfully withdrawn, and should not be added to the $2.73 million estimate.

Did the Initia exploit mint native INIT?

Co-founder Ezaan Mangalji said the suspected minting flaw did not apply to native INIT. His preliminary statement does not establish that network operations or bridged assets were unaffected.

Was Agora's AUSD issuance contract hacked?

Agora said it has no AUSD contract on Initia and described an affected third-party product using AUSD on Ethereum. Its issuer contracts and bridged token representations must be distinguished.

When will Initia resume withdrawals?

The reviewed incident materials did not establish a verified restart timetable, final recovery total or compensation plan. Network restart and exchange deposit or withdrawal reopening require separate confirmation.