Initia Says Cloud Key Breach Moved $3.27 Million in Assets

Initia said an attacker moved about $3.27 million in assets after a cloud key breach, prompting a network halt that left about $2.16 million of those funds frozen. A compromised Google Cloud Platform key was involved in the Nov. 9 command-injection intrusion into Initia’s systems. The intrusion exposed environment variables and opened access to Initia’s GitHub and cloud accounts, further credentials and Anvil, its rollup-hosting platform. The attacker then validated forged Inter-Blockchain Communication withdrawals from five rollups, releasing assets held in escrow on Initia’s layer-1 network. About $3.27 million moved to an attacker-controlled address, while about $2.16 million remained on the halted chain and could not be transferred. Initia and its validators halted the network at 1:18 a.m. ET Nov. 10 (06:18 UTC) after detecting unauthorized escrow transfers.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to TokenPost.