šØ Initia hit by a second exploit in three weeks, $3.27M stolen
Layer-1 network Initia confirmed its second security exploit in less than three weeks, with an attacker taking about $3.27 million after compromising its cloud infrastructure. Initia said the attacker got in on Monday through a command-injection attack involving a compromised Google Cloud key, reached its GitHub and cloud accounts, and validated fraudulent IBC withdrawals from five rollups on the Anvil platform.
About $2.16 million remains frozen on the halted network. The attacker withdrew 13,400 TIA, 8,000 USDC.inj and 597,000 Noble USDC, while no INIT was withdrawn. Initia halted its layer-1 on Tuesday and says it intends to restore the backing of affected assets. The attack follows an Oct. 23 exploit that drained about $2.7 million via a MoveVM script-cache bug.
ā Two hits in three weeks show that cloud and key-management weaknesses can be as dangerous as smart-contract bugs.
#Initia #CryptoSecurity #Hack #DeFi
Layer-1 network Initia confirmed its second security exploit in less than three weeks, with an attacker taking about $3.27 million after compromising its cloud infrastructure. Initia said the attacker got in on Monday through a command-injection attack involving a compromised Google Cloud key, reached its GitHub and cloud accounts, and validated fraudulent IBC withdrawals from five rollups on the Anvil platform.
About $2.16 million remains frozen on the halted network. The attacker withdrew 13,400 TIA, 8,000 USDC.inj and 597,000 Noble USDC, while no INIT was withdrawn. Initia halted its layer-1 on Tuesday and says it intends to restore the backing of affected assets. The attack follows an Oct. 23 exploit that drained about $2.7 million via a MoveVM script-cache bug.
ā Two hits in three weeks show that cloud and key-management weaknesses can be as dangerous as smart-contract bugs.
#Initia #CryptoSecurity #Hack #DeFi
