Initia, a modular blockchain designed to support interconnected chains or “minitias,” halted its Layer 1 mainnet and associated rollups on Friday, October 23, 2026, after confirming a critical security incident involving unauthorized token issuance.
The protocol announced the suspension at 3:41:30 PM UTC, saying it was investigating the situation with security teams, validators, and exchanges. On-chain security researcher Spreek estimated that the attacker exploited an unlimited minting bug to generate unbacked tokens and cashed out roughly $2.6 million initially, with more funds possibly in transit. Onchain data showed a single outbound transfer of about 1,135 ETH, worth more than $2.7 million at the time.
The attack targeted internal issuance logic within contracts deployed on the network. Preliminary reports suggest the attacker converted inflated balances through decentralized liquidity pools before cross-chain communication bridges could be paused. Some of the stolen funds were dispersed across decentralized exchanges on Ethereum and adjacent networks, complicating tracing efforts.
Validators coordinated to freeze the consensus layer at a specific block height, halting block production and preventing further transfers or withdrawals across the base chain and rollups. Several centralized exchanges also temporarily suspended deposits and withdrawals tied to assets within the Initia ecosystem as a precaution.
Initia’s native INIT token fell around 14% immediately after the exploit was reported, before reversing those losses. The team said it will publish a comprehensive post-mortem once code inspection is completed, and validators are expected to coordinate an emergency patch to resume the network safely.
