Initia halts network after second security exploit
Initia said it has halted its network after a second security exploit in less than three weeks, as the project continues recovery efforts following another unauthorized transfer incident. The announcement was made on Initia’s official X account, which said the pause is intended to contain the impact and support ongoing recovery work.
Based on our investigation so far, on November 9th an attacker gained unauthorized access to Initia’s infrastructure through a command injection attack with a compromised GCP key used for provisioning private nodes. This exposed environment variables, which allowed the attacker…
— Initia 🪢 (@initia) November 10, 2026
The latest halt follows an earlier October exploit that the project also linked to a security flaw. In the newer incident, public reporting said attackers were able to move funds across parts of the network’s infrastructure, prompting Initia to suspend activity again while it works with security partners and law enforcement.
Reports on the incident vary on the amount taken, but they consistently point to a fresh breach that forced the network offline. One report said roughly $3.27 million in assets were affected, while another placed the figure closer to $615,000. Initia’s own statement focused on the halt and the recovery process rather than providing a full loss breakdown in the post shared publicly.
The repeated disruption leaves the network under renewed scrutiny as it tries to restore normal operations. For now, the key development is the pause itself: Initia has shut the network again while it assesses the exploit and works through recovery steps.
