Initia Exploit Drains $2.7M Through MoveVM Bug
The Initia exploit stemmed from a MoveVM script-caching flaw that let an attacker bypass security checks and fabricate balances in WETH, iUSD and USDC, without changing the total supply of those tokens or INIT. Before Initia paused its Layer 1 network and rollups on October 23, about $2.7 million in assets—including 105 WETH, roughly 1.4 million AUSD0 and about 1.08 million USDC—was transferred across bridges. The attacker later swapped the assets for 1,135.52 ETH, which Initia says is held at an Ethereum address. Initia has prepared a security patch for partner review and audit, and is working to recover the funds. The team plans to publish a post-mortem; the network is to resume after the fix is reviewed. The Initia exploit may weigh on confidence in the ecosystem until operations restart, although the reported lack of impact on INIT supply limits direct token-supply concerns.
Bearish
The news is bearish for INIT in the short term because the exploit, $2.7 million in transferred assets and suspension of Initia’s Layer 1 and rollups can prompt traders to price in heightened security and operational risks. Such incidents often increase volatility and selling pressure while the network is offline and recovery remains uncertain. The reported exploit did not change INIT’s supply, and a reviewed patch, successful fund recovery and a safe restart could help restore confidence over the longer term. Until those steps are confirmed, however, uncertainty around the vulnerability and ecosystem operations is likely to weigh on sentiment toward INIT.