The Initia blockchain halted operations on Tuesday morning after attackers exploited compromised infrastructure keys to steal at least $615,000. This incident marks the second major security breach for the network in less than three weeks, compounding previous losses and destabilizing its financial foundation. The team identified "unauthorized transfers from the escrow accounts" as the primary vector for the theft. Although most assets remain on-chain, the confirmed off-chain loss is substantial. Users have reacted with anger, accusing the team of an inside job.
Compromised Keys and Recoverable Assets
Initia announced the halt after discovering that compromised rollup infrastructure keys allowed an attacker to fabricate IBC transfers. The post specified that $615,000 made it off-chain, but noted that most removed assets remain on Initia. This situation indicates they may be recoverable via validator coordination. The chain acts as a base layer for Interwoven Rollups, supported by Binance Labs, Delphi Ventures, and HackVC. The vulnerability was specific to the infrastructure keys rather than the core protocol logic. Attackers used these keys to create fake inter-blockchain communication records. This method bypassed standard validation checks for bridged assets. The immediate halt prevented further unauthorized movements from the escrow accounts. Validators are now working to freeze or reclaim the remaining funds before they leave the network entirely.
Cumulative Losses Exceed Remaining TVL
This hack follows a script caching bug that occurred eight days after the chain resumed operations on November 2. That earlier incident let an attacker artificially spoof the MoveVM state, crediting themselves with unbacked WETH, iUSD, and USDC tokens. The result was $2.7 million in losses bridged to Ethereum. Combined, the two incidents total $3.3 million in stolen funds. This amount exceeds Initia’s remaining total value locked, which has dropped over 90% from its peak shortly after launching in May last year. The sheer scale of the loss relative to the chain’s liquidity is alarming. Frustrated users suspect a "crime pump," noting that the INIT token rose around 60% in the 24 hours following the news. Such price movement during a crisis is highly suspicious. The community demands accountability from the development team.
