According to Cointelegraph, Layer-1 blockchain Initia suffered a second security exploit on 11 November, with attackers stealing approximately $3.27 million in crypto assets through a compromised Google Cloud Platform (GCP) key. The breach occurred on 9 November via a command injection attack that exposed environment variables, granting unauthorized access to Initia's GitHub and cloud accounts.

Using obtained credentials, the attacker reached Anvil, a rollup hosting platform, and validated fraudulent Inter-Blockchain Communication (IBC) withdrawals from five rollups, releasing assets from the network's escrow accounts. The attacker transferred 13,400 TIA, 8,000 USDC.inj, and 597,000 Noble USDC before Initia halted its Layer-1 on 10 November. Approximately $2.16 million of stolen assets remain frozen on the halted network. This marks Initia's second major breach in three weeks, following an October 23 exploit that drained $2.7 million.

View Source

Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.