An exploit in Initia's MoveVM allowed an attacker to spoof token balances and withdraw approximately $2.73 million in AUSD, ETH, and USDC through bridges like LayerZero and CCTP before the protocol halted its L1 and rollups. The Initia Foundation has committed funding to restore backing.
An attacker exploited an infinite-mint vulnerability on the Initia Chain, minting tokens at will and cashing out approximately $2.6 million. The exploit drained value from liquidity pools, and additional assets were reportedly still in transit. Initia had not issued an official response at the time of reporting.