Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Initia Zero-day vulnerability: $2.70M Reported Loss

·Source-attributed incident record

Incident Overview

The Initia L1 and its Rollups were halted due to a security incident. An attacker exploited a zero-day (Day 0) bug in Initia's MoveVM implementation on the Cosmos SDK, allowing unlimited minting of unbacked tokens on the L1, and bridged out approximately $2.7 million worth of AUSD, ETH, and USDC before the chain was paused. Native INIT tokens were unaffected.

Sources & References

Original incident referencehttps://x.com/initia/status/2113661738625155217 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    X100

    Attack methodFlash Loan Governance Attack
    Reported loss$ 4,850,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 90,500
  3. Incident date
    Target

    Yapeswap

    Attack methodGovernance Attack
    Reported loss$ 21900
  4. Incident date
    Target

    Polkadot

    Attack methodXCM Executor Vulnerability
    Reported loss$ 1,381,000
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 385000