Initia Network Halted After $60,000 Exploit via Rollup Infrastructure

The Initia ecosystem has officially suspended its Layer 1 (L1) operations following the detection of unauthorized asset transfers from custody accounts. In a coordinated effort with network validators, the halt was implemented at 14:18 Beijing time on November 10, 2024, to prevent further depletion of funds. Initial reports suggest that the breach originated from compromised infrastructure keys, leading to an estimated preliminary loss of approximately $60,000.

Details of the Security Breach and Asset Movement

According to the technical team at Initia, the attacker managed to exploit compromised rollup infrastructure keys to facilitate forged Inter-Blockchain Communication (IBC) transfers. This method allowed the perpetrator to bypass standard security protocols for assets bridged across multiple rollups. The IBC protocol is a standard for interoperability that allows different blockchains to communicate and exchange value.

A preliminary review of the on-chain activity revealed the following details regarding the stolen assets:

• Approximately $57,000 worth of USDC was successfully moved off-platform.
• An additional $3,000 in various tokens left the Initia ecosystem via the Noble network before the emergency halt.
• The vast majority of the other assets targeted in the custody accounts remain secured on the halted L1 network.

Response Measures and Ecosystem Safety

In response to the incident, Initia is currently collaborating with security professionals, validators, and centralized exchanges to track the movement of the stolen funds and assess the full extent of the vulnerability. The suspension of the L1 blockchain serves as a protective measure to ensure that no additional unauthorized transactions can be processed while the investigation is ongoing.

Initial investigations indicate that the attacker exploited compromised rollup infrastructure keys to forge IBC transfers. Initia is working with security teams, validators, and exchanges to determine the full scope of the incident.

The project team has issued a stern warning to the community regarding secondary risks following the exploit. Users are advised to avoid clicking on unofficial links or responding to unsolicited messages, as malicious actors often use network outages to launch phishing campaigns. Further technical details and a post-mortem report are expected once the forensic analysis is complete.