The Initia blockchain was halted Tuesday morning after suffering its second security incident in less than three weeks.

An infrastructure key compromise has led to at least $615,000 in losses which, when added to the $2.7 million lost in October, comes to more than the chain’s remaining total value locked (TVL).

The Initia L1 was halted at 06:18 UTC on November 10 in coordination with validators as a protective measure.

We took this step after identifying unauthorized transfers from the escrow accounts on the Initia L1 that hold assets bridged to several rollups. Our investigation so…

Claiming the likes of Binance Labs, Delphi Ventures, and HackVC among its backers, Initia L1 acts as a “base layer and central liquidity hub for all Interwoven Rollups.” 

On Tuesday morning, the Initia X handle announced a chain halt in response to the discovery of “unauthorized transfers from the escrow accounts on the Initia L1 that hold assets bridged to several rollups.”

The post blamed “compromised rollup infrastructure keys allowing an attacker to fabricate IBC transfers” and tallied $615,000 that made it off-chain. However, “most” of the assets removed from escrow accounts remain on Initia, indicating that they may be recoverable via validator coordination.

Tuesday’s hack comes less than three weeks after a script caching bug let an attacker “artificially [spoof] the MoveVM state, thereby crediting themselves with unbacked WETH, iUSD, and USDC tokens.”

7 million in losses bridged to Ethereum, and was also met with a halt of Initia chain and its rollups.

Source link