# Initia halts its L1 and rollups after a MoveVM mint bug lets an attacker bridge out about $2.7M · pwn.watch

> On Oct 23 2026 an attacker abused a previously unknown MoveVM / Cosmos SDK bug on Initia to mint about 2 million unbacked AUSD and bridge roughly 1.4M AUSD, 105 ETH and 1.08M USDC to Ethereum, about $2.65M to $2.73M. Initia halted the L1 and its rollups at 15:41:30 UTC. Native INIT was not affected. No fix, post-mortem or restart date had been published at the time.

Page: https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026 · generated 2026-10-24T08:44:16.553Z

## Status
- Severity: high · status: live · patch: no-fix-needed
- Product: Initia L1 and rollups (MoveVM)
- Started: 2026-10-23
- Affected: Initia L1 and rollups (bridged assets)

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026/feed.xml
- JSON Feed: https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026.json
- This file: https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026/llms.txt

## Updates (newest first)
- 2026-10-23: Attacker mints unbacked AUSD via a MoveVM bug and bridges ~$2.7M to Ethereum; Initia halts the L1 and rollups at 15:41:30 UTC. (https://www.0xcert.com/advisory/0xCERT-2026-0267)

## Fix brief
# Security brief: Initia halts its L1 and rollups after a MoveVM mint bug lets an attacker bridge out about $2.7M

Source: https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026 · status: live · severity: high · updated Oct 24, 2026, 06:40 UTC

## Patch status
**NO FIX NEEDED: no action on your side beyond verification.**

## What it is
On Oct 23 2026 an attacker abused a previously unknown MoveVM / Cosmos SDK bug on Initia to mint about 2 million unbacked AUSD and bridge roughly 1.4M AUSD, 105 ETH and 1.08M USDC to Ethereum, about $2.65M to $2.73M. Initia halted the L1 and its rollups at 15:41:30 UTC. Native INIT was not affected. No fix, post-mortem or restart date had been published at the time.

Severity detail: ~$2.7M stolen; chain halted

- Product: Initia L1 and rollups (MoveVM)

## Affected versions
- Initia L1 and rollups (bridged assets)

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
No fixed version is listed. Follow the vendor advisory below.

## Latest updates
- Oct 23, 2026: Attacker mints unbacked AUSD via a MoveVM bug and bridges ~$2.7M to Ethereum; Initia halts the L1 and rollups at 15:41:30 UTC.

## Advisories
- [0xCERT-2026-0267: Initia L1 halted after MoveVM mint bug](https://www.0xcert.com/advisory/0xCERT-2026-0267) (0xCERT)

## Write-ups & news
- [Initia halts network after security incident as attacker reportedly mints tokens](https://www.theblock.co/news/defi/2026-10-23-initia-halts-network-after-security-incident-attacker-reportedly-mints-tokens-427755)
- [Initia Halts L1 and Rollups After Reported Mint Exploit](https://thedefiant.io/news/hacks/initia-halts-l1-and-rollups-after-reported-mint-exploit)

---
Machine-readable: https://pwn.watch/i/initia-movevm-infinite-mint-exploit-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.