Initia halted its L1 after unauthorized withdrawals from IBC escrow accounts. Its preliminary investigation says an attacker used command injection and an exposed GCP key to compromise GitHub, GCP and Anvil, then authenticated fraudulent IBC withdrawals from five rollups. About $3.27M was moved, with $2.16M still locked on the halted L1; no INIT was withdrawn.
The recovery timeline may depend on rebuilding infrastructure and restoring backing assets, while the incident could increase scrutiny of key management and withdrawal controls. Which control should be independently validated before the network restarts?
$init
Not financial advice.
Follow for more crypto news and market updates.
The recovery timeline may depend on rebuilding infrastructure and restoring backing assets, while the incident could increase scrutiny of key management and withdrawal controls. Which control should be independently validated before the network restarts?
$init
Not financial advice.
Follow for more crypto news and market updates.