Initia network halt: Chain Frozen After $2.7M Bridge Exploit

The Initia network halt is now in its second day. Initia stopped its Layer 1 and all of its rollups at 15:41 UTC on Friday, October 23, after an attacker used a previously unknown bug to mint unbacked bridged tokens and pull roughly $2.7 million out to Ethereum. As of the last public updates, there was no restart date and no post-mortem.

What actually happened

According to D2 Finance's breakdown, relayed by Unchained and the 0xCERT advisory, the attack started at 14:59:26 UTC. A single Move function call minted 2,000,000 units of the Initia-side LayerZero version of AUSD, plus matching amounts of bridged USDC and ETH. Those tokens were worthless on their own, because nothing real backed them.

The trick was the bridge. The attacker burned the fake tokens on Initia and sent valid bridge messages to Ethereum, where lockbox contracts held the real assets. D2 says this released about 1.4 million AUSD, roughly 71% of that adapter's holdings, and about 105 ETH, around 96% of the native-ETH adapter. Another 1.08 million USDC was minted on Ethereum through CCTP.

In D2's telling, about $2.65 million reached Ethereum within 7 minutes and 21 seconds of the mint. Everything was swapped to ETH, and about 1,135.5 ETH moved to a fresh wallet at 15:41 UTC, the same minute the chain went dark.

Pseudonymous researcher Spreek flagged the drain about 14 minutes before the halt and first estimated $2.6 million cashed out. Zon told The Block the attacker "was able to mint and bridge out ~$2.7m worth of AUSD, ETH, and USDC before the chain was paused."

Who actually lost money

This is where it gets messy. Agora, the company that issues AUSD, said it "has no smart contracts deployed on Initia" and that "AUSD is fully backed." In other words, the token minted on Initia was a bridged copy, not Agora's own AUSD.

D2 later corrected its analysis to say the loss sits with depositors of the third-party AUSD bridge adapter, not with AUSD holders in general. Unchained reported that Agora froze the attacker's Ethereum address about 89 minutes after the swap, by which point it held no AUSD.

Bridges do not check whether a burned token was ever real. If the source chain can mint from thin air, the lockbox on the other side pays out anyway.

That is the core lesson of the Initia network halt. The bug was in Initia's own execution layer, but the damage landed on the bridge contracts that trusted it. We saw a similar trust problem in a different setting in our OpenCode API key breach story, and bridges are a big theme in our LayerZero Zero mainnet explainer.

What Initia has and has not said

Initia's official notice on X said the team is working "to establish the full scope of any impact with security teams, validators, and exchanges." It promised verified updates through official channels only.

What we have not seen yet: a confirmed loss figure from the project account, a root-cause write-up, a patched release, or a restart timeline. Unchained reported no restart date as of late Friday afternoon ET. Treat every number in this piece as preliminary until Initia publishes its own report.

The market shrugged faster than you might expect. The Block reported INIT fell 14% right after the exploit surfaced, then reversed to trade about 14% higher on the day. At our CoinGecko check at 06:07 UTC on October 24, INIT sat near $0.144, up about 8.7% over 24 hours, with a market cap around $30 million.

What to do as a reader

If you hold assets on Initia or its rollups, do not try to bridge in or out until the team confirms a fix. 0xCERT says the same. Nothing moves while the chain is halted anyway, and the period right after an exploit is prime time for phishing.

Ignore DMs and replies offering "refund portals" or "claim pages." Real updates will come from Initia's own accounts. If you supplied liquidity to a bridge adapter that backed Initia assets, check the adapter's own channels, because that is where the losses appear to sit.

If you are just watching INIT, a green candle after a hack is not an all-clear. The full impact is not known, and a long Initia network halt can hit apps, rollups and exchanges in ways that are not priced yet. This is not investment advice, ser. Wait for the post-mortem, then decide.

Sources: The Block, Unchained via Yahoo Finance and the 0xCERT advisory.