{"investigation":{"slug":"initia-ausd-infinite-mint-exploit-october-2026","entity_name":"Initia AUSD Infinite-Mint Exploit (October 2026)","trust_score":15,"severity_base":null,"score_modifier":0,"confidence":0.7,"status":"published","content_type":"investigation","summary":"On October 23, 2026, the Initia layer-1 blockchain and its connected rollups were halted after an attacker exploited a vulnerability in a Move-language function to mint roughly 2 million unbacked AUSD tokens, moving an estimated $2.6 million to $2.7 million worth of assets to Ethereum. AUSD issuer Agora said its genuine token contract is not deployed on Initia and remains fully backed, while Initia had not published a confirmed loss figure, root-cause post-mortem, or restart timeline as of the most recent reporting. Exchanges Upbit and Bithumb suspended INIT deposits and withdrawals as a precaution following the incident.","sections":[{"content":"On October 23, 2026, Initia announced via its official X account that it had halted its layer-1 network and all connected rollups (Minitias) at 3:41:30 PM UTC due to a security incident, stating: \"As of Oct 23, 2026, 3:41:30 PM UTC, the Initia L1 and Rollups have been halted due to a security incident.\" Blockchain security researcher Spreek was reported to be the first to publicly flag unauthorized token minting on the network, noting that an attacker had converted assets worth approximately $2.6 million to other chains, with transfers reportedly still in progress at the time. DeFi platform D2 Finance stated that the attacker exploited a vulnerability in a Move-language function to mint about 2 million AUSD tokens without sufficient backing, then bridged roughly 1.4 million AUSD, 105 ETH, and 1.08 million USDC to Ethereum, where the stolen assets were consolidated into a single Ethereum wallet holding approximately 1,135.5 ETH, valued at about $2.73 million. Initia co-founder Ezaan Mangalji described the flaw as a \"Day 0\" bug in the project's MoveVM implementation on the Cosmos SDK, stating that it did not affect native INIT tokens. Reported total loss figures vary between about $2.6 million and $2.7 million across outlets, and Initia had not independently confirmed a final figure as of the latest reporting.","heading":"The Exploit and Network Halt","sources":[{"url":"https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained","name":"Cointelegraph: Initia halts blockchain, exploit drained","type":"news_article","credibility":2},{"url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident","name":"CoinMarketCap Academy: Initia Halts Layer 1 and Rollups After Security Incident","type":"news_article","credibility":2},{"url":"https://cryptobriefing.com/hacker-mints-tokens-initia-chain-exploit/","name":"Crypto Briefing: Hacker mints tokens on Initia Chain, cashes out about $2.6 million","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/initia-pauses-l1-and-rollups-after-2-6m-exploit-reported","name":"KuCoin News: Initia Pauses L1 and Rollups After $2.6M Exploit Reported","type":"news_article","credibility":3}],"severity":"critical"},{"content":"Agora, the issuer of the AUSD stablecoin, stated that \"the AUSD smart contract is not deployed on Initia and no AUSD was minted on Initia,\" and said a separate, third-party product using AUSD on Ethereum — not operated by Agora — was the one affected by the attacker's bridged-out funds. Agora said it would freeze funds tied to hacker-controlled addresses on chains where its own contracts are deployed, and maintained that genuine AUSD remains fully backed and that its operations continue as normal. This distinction means the exploited value did not originate from a compromise of Agora's core AUSD issuance, but rather from a third-party integration that allowed unbacked tokens minted on Initia to be redeemed for real assets on Ethereum via cross-chain bridging (reported by some outlets as a lockbox-style adapter). Reports on the precise mechanics of this Ethereum-side redemption path, and the exact amount attributable to it, are not fully reconciled across sources and should be treated as developing.","heading":"AUSD Issuer Agora's Response","sources":[{"url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident","name":"CoinMarketCap Academy: Initia Halts Layer 1 and Rollups After Security Incident","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained","name":"Cointelegraph: Initia halts blockchain, exploit drained","type":"news_article","credibility":2}],"severity":"high"},{"content":"South Korean exchange Upbit posted a notice within roughly 16 minutes of Initia's halt announcement, temporarily suspending INIT deposits and withdrawals as a user-protection measure in response to signs of a security incident on the Initia chain, and warning that INIT's price volatility could increase. Upbit said the suspension would remain in place until deposit and withdrawal stability could be confirmed. Bithumb also suspended INIT deposits and withdrawals and issued an investment warning for the token, with Upbit stating it had confirmed a suspected security issue on the Initia chain on October 24. Neither exchange's suspension by itself confirms a direct loss of native INIT tokens; both framed the action as precautionary pending further investigation.","heading":"Exchange Precautions: Upbit and Bithumb","sources":[{"url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident","name":"CoinMarketCap Academy: Initia Halts Layer 1 and Rollups After Security Incident","type":"news_article","credibility":2},{"url":"https://www.odaily.news/en/newsflash/527066","name":"Odaily: Upbit and Bithumb suspend INIT transactions amid security incident","type":"news_article","credibility":3}],"severity":"medium"},{"content":"As of the most recent reporting available, Initia had not published a confirmed total loss figure, a root-cause post-mortem, or a timeline for restarting the L1 and its rollups. Approximately seven hours after the halt, the chain remained stuck at block 23,365,925 with no restart time given by developers. Initia's public statements said only that the team was working with security researchers, validators, and exchanges to assess the scope of impact, and urged users to be wary of unofficial links or claims pending verified updates through official channels. This absence of a public post-mortem or restart date, several days after the incident, represents an ongoing transparency gap and continuing uncertainty for users and token holders.","heading":"Lack of Post-Mortem and Recovery Timeline","sources":[{"url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident","name":"CoinMarketCap Academy: Initia Halts Layer 1 and Rollups After Security Incident","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained","name":"Cointelegraph: Initia halts blockchain, exploit drained","type":"news_article","credibility":2}],"severity":"high"},{"content":"INIT, Initia's native token, fell sharply to around $0.115 shortly after the exploit was disclosed, before recovering to trade above $0.15 later the same day, according to CoinGecko and CoinMarketCap data cited in contemporaneous reporting. The partial price recovery occurred despite the network remaining halted and no confirmed resolution of the incident, suggesting market reaction may have been driven in part by the co-founder's statement that the bug did not affect native INIT token minting.","heading":"Market Impact","sources":[{"url":"https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained","name":"Cointelegraph: Initia halts blockchain, exploit drained","type":"news_article","credibility":2}],"severity":"low"}],"timeline":[{"date":"2026-10-23","event":"Initia halts its L1 and all connected rollups at 3:41:30 PM UTC after security researcher Spreek flags unauthorized AUSD minting and roughly $2.6 million in assets being converted and moved off-chain.","source":"Initia official statement, via CoinMarketCap Academy and Cointelegraph","source_url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident","date_evidence":"As of Oct 23, 2026, 3:41:30 PM UTC, the Initia L1 and Rollups have been halted due to a security incident."},{"date":"2026-10","event":"D2 Finance reports that the attacker exploited a vulnerability in a Move function to mint about 2 million unbacked AUSD, bridging roughly 1.4 million AUSD, 105 ETH, and 1.08 million USDC to Ethereum and consolidating stolen funds into a wallet holding about 1,135.5 ETH (~$2.73M).","source":"Cointelegraph, citing D2 Finance","source_url":"https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained"},{"date":"2026-10","event":"Upbit and Bithumb suspend INIT deposits and withdrawals as a precautionary measure and issue investment warnings about INIT price volatility.","source":"Odaily newsflash","source_url":"https://www.odaily.news/en/newsflash/527066","date_evidence":"Upbit said it confirmed a suspected security issue on the Initia chain on October 24.","date_original":"2026-10-24"},{"date":"2026-10","event":"Agora, issuer of AUSD, states that the AUSD smart contract is not deployed on Initia, that no genuine AUSD was minted there, and that it will freeze hacker-linked funds on chains where its own contracts exist; Agora says AUSD remains fully backed.","source":"CoinMarketCap Academy","source_url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident"}],"sources_used":[{"url":"https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained","name":"Cointelegraph: Initia halts blockchain, exploit drained","type":"news_article","credibility":2},{"url":"https://coinmarketcap.com/academy/article/initia-halts-l1-rollups-security-incident","name":"CoinMarketCap Academy: Initia Halts Layer 1 and Rollups After Security Incident","type":"news_article","credibility":2},{"url":"https://cryptobriefing.com/hacker-mints-tokens-initia-chain-exploit/","name":"Crypto Briefing: Hacker mints tokens on Initia Chain, cashes out about $2.6 million","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/initia-pauses-l1-and-rollups-after-2-6m-exploit-reported","name":"KuCoin News: Initia Pauses L1 and Rollups After $2.6M Exploit Reported","type":"news_article","credibility":3},{"url":"https://www.odaily.news/en/newsflash/527066","name":"Odaily: Upbit and Bithumb suspend INIT transactions amid security incident","type":"news_article","credibility":3}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-investigator","created_at":"2026-10-28T04:37:08.593982+00:00","updated_at":"2026-10-28T04:37:14.662+00:00"},"source_quality":{"total":5,"tier1":0,"tier2":1,"tier3":0,"unrated":4},"follower_count":null,"content_updated_at":"2026-10-28T04:37:08.923Z","last_fact_checked_at":null,"fact_check_next_allowed_at":null,"update_next_allowed_at":null}