Initia’s entire network has been down for a third day: MoveVM cache vulnerability exploited, approximately $2.7 million bridged out
📌 Initia’s official X post on 10/24: Attackers exploited a MoveVM script cache vulnerability to bypass security checks and forge on-chain state, crediting unbacked WETH, iUSD, and USDC out of thin air; native INIT was not minted, and its total supply remains unchanged
📌 Outflows (official figures/D2 Finance via Unchained): Approximately 105 WETH + 1.4 million AUSD0 moved via LayerZero, and approximately 1.08 million USDC via Noble/CCTP; they were converted into 1135.52 ETH, now sitting at an Ethereum address. It took only about 7 minutes from minting to arrival on Ethereum
📌 The L1 and all Rollups have been halted since 10/23 15:41 UTC. Officials say patching and auditing will take several days; there is no restart date or full postmortem yet. Upbit and Bithumb have suspended INIT deposits and withdrawals
📌 Price: INIT fell about 14% when the news first broke, then rebounded. CoinGecko shows a 24-hour range of approximately $0.114–$0.156 (CryptoNinjas)
【Commentary】
This wasn’t INIT itself being inflated; it was “the other side of the bridge being unable to verify whether the burned tokens are genuinely backed”—D2’s exact wording was that the OFT adapter could not validate them. The cross-chain token-locking contracts were the real weak point: approximately 71% of the AUSD adapter and 96% of the ETH adapter were drained. The price rebound suggests the market is betting the losses are manageable, but with the network halted, all ecosystem assets are frozen, and liquidity risk is being underestimated.
【Opportunities/Risks】
1️⃣ Watch for the restart announcement and postmortem: If the patch audit goes smoothly, a “sell-the-news is over” rally may follow; if the restart is delayed again or more affected assets are found, the rebound could easily fade
2️⃣ Keep an eye on the address holding those 1135 ETH: If the funds enter a mixer, the chances of recovery drop sharply; a freeze or negotiated return would be positive
3️⃣ While the network is halted, INIT can only be traded on exchanges, and Korean exchanges have suspended deposits and withdrawals. Spreads and volatility may widen, so avoid high leverage
4️⃣ Broader implications: Similar Move/Cosmos chains and cross-chain assets using LayerZero locking adapters may face renewed scrutiny over their security premium
Do you think the network will be back up within “a few days”? After it restarts, would you withdraw your assets first or keep holding? Share your thoughts in the comments.
#Initia #跨链安全 #加密安全 #DeFi
$INIT $ETH For informational purposes only; not investment advice