Initia halts blockchain and rollups after reported $2.6M exploit
Initia halted its layer-1 blockchain and rollups on Oct. 23, 2026, after reports of unauthorized token activity. It remains unclear whether the activity involved tokens created on Initia, a third-party product handling AUSD, or both.
- Initia said the halt began at 3:41:30 p.m. UTC.
- Security researcher Spreek estimated about $2.6 million had been “cashed out.” That is not a confirmed loss total.
- Reports describe different movements of AUSD, ETH and USDC, and the figures have not been reconciled.
- Initia had not announced a restart timetable in its cited update.
Initia said it had halted both its base blockchain, or layer-1 (L1), and its rollups while security teams, validators and exchanges investigated. Rollups are networks connected to a base chain. Initia’s update did not explain how the halt was carried out or identify which component may have failed.
The project’s initial statement did not confirm a loss amount, name affected applications or users, or explain the suspected vulnerability. Initia said: “We will share verified information through our official channels as it becomes available.” CoinMarketCap Academy reported that, as of 18:50 UTC, Initia had not provided further details about what happened or whether funds had been lost.
What the reported figures show
Security researcher Spreek reported unauthorized token minting and estimated that approximately $2.6 million had been “cashed out.” Spreek also said funds were still moving when the estimate was published. This is an attributed estimate. The available reporting does not specify exactly which transfers it counts or whether it covers funds stolen, swapped, bridged or otherwise moved.
The Defiant reported that 1.4 million AUSD left a bridge adapter. An earlier analysis attributed to D2 Finance described the creation of 2 million unbacked AUSD, along with withdrawals of 1.4 million AUSD, 105 ETH and 1.08 million USDC to Ethereum. The reports do not say whether those figures overlap or describe separate stages of the same activity.
The Defiant also reported an Ethereum transfer of 1, 135.5 ETH. That amount should not be added to Spreek’s estimate as a separate loss. The reporting does not establish whether it represents distinct funds or overlaps with other reported movements. None of the figures provides a reconciled total of funds lost, moved or recovered.
Why the AUSD account is disputed
The reports differ on whether AUSD was newly created or existing AUSD moved through a third-party system. D2 Finance’s analysis described the creation of unbacked AUSD. Agora, the stablecoin issuer, said it had no smart contracts deployed on Initia and that a third-party product using AUSD on Ethereum was involved.
Aave governance materials list AUSD deployments on Ethereum, Avalanche, Sui and Mantle, but not Initia. That aligns with Agora’s statement, though it does not independently identify the token or mechanism involved in the reported transfers. The available information does not show whether the bridge activity involved native AUSD, a third-party representation of it or existing AUSD moving through another product.
Agora also said AUSD remained fully backed and its operations continued normally. The issuer said it planned to freeze funds tied to hacker addresses on chains where its contracts are deployed. The reported updates do not confirm that funds were frozen or recovered, or independently verify reserve backing during the incident.
A failure in a third-party product would not, on its own, show that Agora’s own contracts or reserves were compromised. But an issuer’s assurance does not explain what happened in a separate system using a familiar stablecoin name. The answer depends on the specific contracts and transactions involved.
Exchange response and what remains unknown
Upbit suspended INIT deposits and withdrawals at 15:57 UTC on Oct. 23, citing suspected security concerns and user protection. The exchange said it would resume services once it confirmed deposit and withdrawal stability. The suspension was a precaution. It does not establish the cause or scale of the incident.
Initia had not provided a restart schedule in the cited update. The technical cause, the applications and users affected, and the relationship among the reported AUSD, ETH and USDC movements also remained unclear. Until those details are established, the $2.6 million estimate should not be treated as a final loss figure.
Key questions and answers
-
When did Initia halt its network?
Initia said the suspension took effect at 3:41:30 p.m. UTC on Oct. 23, 2026.
-
How much was lost?
There is no confirmed, reconciled loss total. Spreek estimated approximately $2.6 million had been “cashed out, ” but the reported asset movements may overlap and have not been reconciled.
-
Was Agora’s AUSD minted on Initia?
That claim is disputed. Agora said it had no smart contracts deployed on Initia and that a third-party product using AUSD was involved. The token and mechanism behind the reported activity have not been established.
-
When will Initia resume operations?
No restart timetable was provided in the cited update.
