Tools Crypto Exploit Tracker exploit-0156
Exploit record
Initia security incident and chain halt
- Loss
- $2.7M
- Attack vector
- MoveVM state validation
- Chain
- Initia
- Sector
- Layer 1
What happened
Initia halted its L1 and rollups on 23 October after an exploit. Bitquery’s subsequent investigation estimates $2.73m paid from bridge reserves, updating the earlier $2.6m alert.
Bitquery distinguishes the $2.73m in real bridge payouts from about $7.48m in unbacked token balances at face value. Initia’s 24 October follow-up identifies a MoveVM script-caching flaw that allowed forged state. The operator dated the halt to 15:41:30 UTC on 23 October. The estimate records bridge payouts before any subsequent recoveries.
Sources
- Initia operator statementx.com/initia/status/2113661738625155217
- Spreek initial loss estimatex.com/spreekaway/status/2113653520981447144
- Agora issuer clarificationx.com/withAUSD/status/2113698590115979409
- Bitquery original bridge-reserve accountingbitquery.io/investigations/initia-hack
- Initia follow-up, 24 Octoberx.com/initia/status/2113915002008612945
One record from the Crypto Exploit Tracker, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 25 October 2026