The Initia network exploit has left the project’s Layer 1 chain and rollups halted while the team checks a software flaw. Reports from October 23 put the value of assets bridged out at about $2.7 million. That figure is still an estimate, not a final loss total.
What is confirmed about the Initia network exploit
Initia halted its Layer 1 network and rollups at 15:41:30 UTC on October 23. The team said it was working with security experts, validators and exchanges to learn what happened. Its public notice confirmed the halt. It did not give a restart time or a final loss figure.
The Block and Unchained reported that co-founder Ezaan Mangalji, known as Zon, pointed to a bug in the network’s MoveVM code on the Cosmos SDK. His early view was that the bug let an attacker create extra tokens on Initia and then move assets through bridges. He said the native INIT token was not affected. This is a preliminary account, not a final technical report.
Which assets may be affected?
Reports on the Initia network exploit named AUSD, ETH and USDC among the assets moved before the pause. On-chain analysis by Bitquery put the value that reached Ethereum at about $2.73 million. The larger value of tokens made on Initia is not the same as the value taken out. Initia had not confirmed a final loss figure in the reports reviewed.
KuCoin said on October 24 that it had paused INIT deposits and withdrawals for essential maintenance. That notice confirms a service limit at the exchange. It does not prove the cause of the exploit or say when transfers will resume.
What users should do after the Initia network exploit
While the Initia network exploit is under review, users should avoid bridging assets to or from the affected network until Initia and related services give clear advice. Check official project and exchange notices before trying a transfer. Do not trust private messages that offer recovery, compensation or a special bridge link.
No real support team should ask for your seed phrase or private key. If you hold assets through another chain, exchange or wallet, check that service’s own status. The impact depends on where an asset is held and whether its transfer route needs Initia. Do not assume every balance has the same risk.
What remains unknown about the Initia network exploit
The full cause, affected contracts and addresses, final loss total, recovery rate and restart time remain unknown in the reports reviewed. The MoveVM explanation is an early view from the project’s co-founder. It should not be treated as a final finding until the team shares technical evidence.
This event also shows why code audits cannot remove every risk in live software. Our earlier coverage of crypto security audits and Q3 losses explains why reviews and live incident response serve different roles. For this case, separate the confirmed network halt from the details that remain under review.
Sources: The Block, October 23, 2026; Unchained, October 23, 2026; Bitquery on-chain analysis, October 23, 2026; KuCoin notice, October 24, 2026.
