Written by Ezra Reguerrastaff writerEdited by Felix Ngstaff editorWritten by Ezra Reguerrastaff writerEdited by Felix Ngstaff editorInitia confirms second exploit in 3 weeks, $3.27M stolen in latest attack
Latest NewsPublishedNov 11, 2026Initia said an attacker exploited compromised cloud credentials to move $3.27 million in crypto assets, with about $2.16 million remaining frozen on its halted network.
Layer-1 blockchain network Initia confirmed Wednesday that it has suffered its second security exploit in less than three weeks, with an attacker stealing about $3.27 million in crypto assets after compromising the platform’s cloud infrastructure.
On Wednesday, Initia said the attacker gained unauthorized access on Monday through a command injection attack involving a compromised Google Cloud Platform key. The company said the breach exposed environment variables, allowing the attacker to access Initia’s GitHub and cloud accounts and obtain additional credentials.
According to Initia, the attacker accessed Anvil, a platform hosting rollups, and validated fraudulent Inter-Blockchain Communication (IBC) withdrawals from five rollups, releasing assets held in the network’s escrow accounts.
Initia said about $2.16 million of the stolen assets remain frozen on its halted network. The attacker sold assets on Initia’s decentralized exchange and withdrew 13,400 TIA, 8,000 USDC.inj and 597,000 Noble USDC. No INIT tokens were withdrawn.
Initia halted its layer-1 on Tuesday and said it intends to restore the backing of affected assets. The blockchain said recovery efforts are ongoing with its law enforcement and security partners.
The incident follows an Oct. 23 exploit that saw an attacker drain about $2.7 million after exploiting a vulnerability in Initia’s MoveVM script cache. This allowed malicious code to bypass security checks and create unbacked token balances that were subsequently bridged out of the network.
Related: North Korean hackers create memecoins to launder funds from Binance hack: Elliptic
Subscribe to daily byte-sized crypto news from Cointelegraph
Subscribe Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.More on the subject
Zcash devs propose another block time cut days after NU7 upgrade
Nov 9, 2026Ezra ReguerraGOPAX halts crypto trading, withdrawals to move all assets to cold storage
Nov 6, 2026Ezra ReguerraZcash NU7 upgrade goes live, leaves 12,224 ZEC stranded in Sprout pool
Nov 6, 2026Ezra ReguerraZcash devs propose another block time cut days after NU7 upgrade
Nov 9, 2026Ezra Reguerra
GOPAX halts crypto trading, withdrawals to move all assets to cold storage
Nov 6, 2026Ezra Reguerra