Initia Halts L1 and Rollups After Security Incident

Initia halted its layer-1 blockchain and its rollups on 23 October after what the project called a security incident, freezing the network while it investigates. In a post on X, the team said the chain had been stopped as of 15:41:30 UTC and that it was “working to establish the full scope of any impact with security teams, validators, and exchanges”. As of its notice, Initia had not put a figure on any losses, named a cause, or published a post-mortem, and it had posted no further update.

The scale and mechanism are so far described only by outside researchers. Blockchain analyst Spreek said on X that the chain had been “hacked and a bunch of tokens infiniminted”, with the attacker having “cashed out $2.6m thus far with more in flight”. Crypto Briefing, citing Spreek, reported the same “infinimint” exploit and the roughly $2.6 million figure. Spreek said the attacker minted bridgeable tokens without limit and bridged them back out, draining the bridge contract — a claim Initia has neither confirmed nor denied.

In brief

Initia paused its L1 and rollups at 15:41 UTC on 23 October, citing a security incident, and says it is coordinating with validators and exchanges.
Researcher Spreek and Crypto Briefing report an infinite-mint (“infinimint”) exploit that cashed out about $2.6m, with more funds said to be moving; Initia has not confirmed a figure or a cause.
Initia launched its mainnet in 2025, raised about $24m from backers including Binance Labs and Delphi Digital, and had passed multiple audits.

Halting the chain is damage control, not a fix

Stopping an entire network is the bluntest tool a blockchain team has, and reaching for it signals that the bleeding was judged worse than the disruption of going dark. A halt buys time: it stops further unauthorised minting, and it lets the team coordinate with the validators who run the chain and the exchanges where stolen tokens would be sold or swapped, so deposits can be frozen before the funds scatter. That coordination is exactly what Initia says it is doing. The move puts Initia in recent company. Cysic halted its cross-chain bridge after an unauthorised mint of 10 million CYS, and Qubic paused its whole network after an attacker drained wallets — in both cases the pause was the first line of defence rather than a cure. The limitation is just as plain: a halt does nothing to claw back what has already left. Once tokens are bridged and swapped, recovery depends on exchanges acting fast or the attacker being traced, and on a decentralised chain even restarting cleanly is a negotiation among validators rather than a switch the team can simply flip.

Where the response goes from here

The reported mechanism, if confirmed, points at the bridge rather than any single application, which is the detail that will decide how damaging this proves. A flaw in one app built on Initia is survivable; a flaw in core minting or bridging logic is a far deeper problem for a chain whose pitch is interwoven rollups spanning two virtual-machine environments, a design that widens the surface where permissions can be misconfigured. The pattern of attackers moving funds to mixing services, as when the Drift exploiter routed about $61m of ether into Tornado Cash, is why the next hours matter more than the next days. The things to watch are concrete: whether Initia’s post-mortem locates the bug in core logic or a single contract, whether the reported $2.6 million is the final tally or a floor, and whether the halt and exchange coordination recover anything at all. Until Initia publishes its own account, the loss figure remains a researcher’s estimate, not a confirmed number.