Initia Blockchain Halt Follows $2.7M Unauthorized Token Minting Exploit
The Initia blockchain halt began Friday, October 23, 2026, when the modular platform stopped its layer one network and connected rollups after an attacker exploited a security flaw to mint an estimated $2.7 million worth of tokens. Co-founder Ezaan Mangalji confirmed the unauthorized minting, which forced the team to suspend operations across the entire network while investigators assessed the damage.
The Initia blockchain halt carries weight beyond a single project because the platform coordinates activity across multiple connected networks. A vulnerability in the main chain can therefore affect applications and services built on top of it, leaving users and partners exposed while the network remains offline.
Initia Blockchain Halt Announced on X
The official Initia account on X announced the suspension at 12 p.m. Eastern time on Friday, stating that the layer one chain and rollups had been stopped as of 3:41:30 PM UTC due to a security incident. The team said it was actively investigating and working to establish the full scope of any impact alongside security teams, validators and exchanges.
As of 7:45 p.m. Friday, roughly seven hours after the initial halt, the chain remained offline and stuck at block height 23365925. According to scan.initia.xyz, the layer one blockchain had not resumed operations, and the official X account had not confirmed the total financial damage or announced when normal operations would restart.
The extended downtime left users unable to move assets or interact with applications on the network. Developers provided no timeline for restoring service, and the lack of a confirmed damage figure added uncertainty for token holders and partner projects that rely on Initia for cross-chain coordination.
The decision to halt the chain rather than allow it to continue processing blocks reflects the seriousness of the exploit. By freezing the network, the team aimed to prevent further unauthorized minting and limit the attacker's ability to move additional funds off the platform.
MoveVM Flaw Enabled Token Minting
Mangalji attributed the breach to a previously unknown vulnerability in Initia's MoveVM implementation on the Cosmos SDK. He described it as a Day 0 bug that allowed the exploiter to mint additional tokens on the layer one chain, though he confirmed the flaw did not affect native INIT tokens.
The attacker was able to mint and bridge out approximately $2.7 million worth of AUSD, ETH and USDC before the chain was paused, according to Mangalji. Initia's layer one chain was built on the Cosmos SDK using CometBFT consensus, and the platform aims to simplify how separate cryptocurrency networks interact with one another.
Because Initia's architecture links its main chain to a series of rollups, a flaw in the base layer can ripple outward. The Initia blockchain halt therefore disrupted not only the core network but also the connected systems that rely on it for coordination and settlement.
The use of MoveVM on Cosmos SDK represents a technical choice that combines the Move programming language's virtual machine with the Cosmos ecosystem's modular framework. A bug in that integration point gave the attacker a path to create tokens that did not exist before the exploit.
Agora and Upbit Respond to Exploit
Agora, the firm that issues the AUSD stablecoin, said its own token contract was not compromised in the incident. The company noted it has no smart contracts deployed on Initia and confirmed that AUSD deployments on all networks and Agora operations continue as normal.
South Korean cryptocurrency exchange Upbit suspended INIT deposits and withdrawals in response to the breach. The exchange took the step while the Initia blockchain remained offline and the full extent of the exploit was still being determined.
The moves by Agora and Upbit illustrate how third parties react when a coordinating chain goes down. Stablecoin issuers must reassure users that their assets are safe, while exchanges often pause transfers to prevent further losses until the situation becomes clearer.
Agora's statement that it has no smart contracts on Initia means the AUSD tokens minted by the attacker were created through the MoveVM flaw rather than through any vulnerability in Agora's own code. That distinction matters for users trying to understand where the risk originated and which systems remain secure.
INIT Token Price Recovers After Initial Drop
INIT initially slipped following news of the exploit but later rebounded, standing 12.5% higher over the last 24 hours. The token has recorded a 65.8% gain over the past 30 days since September.
The price recovery occurred even as the blockchain remained halted and developers had not yet provided a timeline for restoring operations. The incident highlights the risks facing modular blockchain platforms that coordinate activity across multiple networks.
Market participants appeared to separate the technical failure from the token's recent performance, at least in the short term. Whether that confidence holds will likely depend on how quickly the team can bring the network back online and provide a full accounting of the losses.
The Initia blockchain halt serves as a reminder that even well-designed platforms can harbor undiscovered vulnerabilities. The team's response, including the decision to pause the network and engage with security teams, validators and exchanges, will shape how the project recovers and how users assess its reliability going forward.
Conclusion
Initia's layer one blockchain and connected rollups remained offline as of Friday evening, with the chain stuck at block height 23365925 following an exploit that minted an estimated $2.7 million in tokens. Co-founder Ezaan Mangalji identified the cause as a Day 0 bug in the platform's MoveVM on Cosmos SDK, though native INIT tokens were not affected. Developers have not announced when the network will resume operations or confirmed the final financial impact.
Frequently Asked Questions
What caused the Initia blockchain halt on October 23, 2026?
Initia halted its layer one chain and rollups after an attacker exploited a previously unknown Day 0 bug in the platform's MoveVM implementation on the Cosmos SDK. The flaw allowed the exploiter to mint additional tokens on the layer one chain, prompting the team to suspend operations at 3:41:30 PM UTC.
How much did the attacker mint in the Initia exploit?
The attacker minted and bridged out approximately $2.7 million worth of AUSD, ETH and USDC before the chain was paused, according to Initia co-founder Ezaan Mangalji. The unauthorized minting occurred through the MoveVM vulnerability.
Were native INIT tokens affected by the MoveVM bug?
No, native INIT tokens were not affected by the vulnerability. Co-founder Ezaan Mangalji confirmed that the Day 0 bug allowed the exploiter to mint additional tokens on the Initia layer one but did not apply to native INIT tokens.
Is the AUSD stablecoin compromised after the Initia hack?
Agora said its AUSD token contract was not breached and that the company does not operate any smart contracts on the Initia network. The issuer added that AUSD continues to function normally across all other supported platforms.
When will the Initia blockchain resume operations?
As of the latest information from scan.initia.xyz, the layer one blockchain remains offline and developers have not announced when normal operations will resume. The chain was stuck at block height 23365925 as of 7:45 p.m. Friday, roughly seven hours after the halt.