PANews
PANews|11月 10, 2026 19:57
[Initia: Attack Originated from GCP Key Leak, Approximately $3.27 Million in Assets Transferred] Initia posted on the X platform disclosing the progress of its security incident investigation, stating that on November 9th, attackers used a leaked GCP key (used to configure private nodes) to illegally access Initia's infrastructure via command injection. This allowed them to obtain Initia's GitHub, GCP account, and other credentials, as well as gain access to the Rollup hosting platform Anvil. They then used this access to verify five forged IBC withdrawals on Rollup, unlocking assets in Initia's L1 IBC hosting account. Approximately $3.27 million in assets were transferred to the attacker's address, and another $2.16 million in stolen funds remain on the suspended L1 account and cannot be transferred.
+5
Mentioned
Share To

Timeline

HotFlash

APP

X

Telegram

Facebook

Reddit

CopyLink

Hot Reads