خبری درباره‌ی کرونوس (CRO)

Initia شبکه را بعد از روز 0 متوقف می کند اشکال غیرمجاز را فعال می کند…

Finance Feeds ۳ روز پیش خلاصه‌ی فارسی · ۴۵۹ کلمه
Initia شبکه را بعد از روز 0 متوقف می کند اشکال غیرمجاز را فعال می کند…

Initia halted its Layer 1 blockchain and connected rollups on October 23 after a security incident allowed an attacker to mint tokens without authorization and move approximately $2.7 million worth of assets out before the network was stopped. Initia co-founder Ezaan Mangalji said preliminary findings point to a previously unknown bug in the network's MoveVM implementation on the Cosmos SDK. The vulnerability allowed unauthorized token minting but did not apply to INIT, the blockchain's native token. Mangalji said the attacker was able to mint and bridge out roughly $2.7 million worth of AUSD, ETH and USDC before the chain was paused. That figure should not yet be treated as Initia's confirmed final loss because the project is still determining the full impact of the incident. Initia said it was working with security teams, validators and exchanges to establish the scope of the breach. How Did the Initia Minting Exploit Work? The preliminary technical explanation centers on MoveVM, the virtual-machine environment used by parts of the Initia ecosystem. Mangalji described the vulnerability as a previously unknown bug in Initia's implementation of MoveVM on the Cosmos SDK. The critical issue is that the attacker could apparently create assets without the normal authorization that should precede their issuance. If those newly created assets can then be bridged or exchanged for legitimately backed assets, an unauthorized mint becomes an economic extraction rather than simply an accounting problem. That distinction has appeared in other recent cross-chain incidents. In October, Cysic suspended its bridge after an attacker minted 10 million CYS without authorization. In that case, the amount created was not equivalent to the attacker's realized proceeds because some tokens remained traceable or restricted. The same principle applies to Initia. The amount that could theoretically have been created, the amount bridged out and the final economic loss are separate figures. Initia has so far provided an estimate for assets moved out but not a completed loss reconciliation. Investor Takeaway The key figure is not how many tokens could be minted, but how much real liquidity the attacker successfully extracted before the network halt. Why Did Initia Halt Both Its L1 and Rollups? Stopping the network limits an attacker's ability to continue exploiting the affected execution path or transfer additional assets while developers investigate. But a full blockchain halt also affects legitimate users and applications that depend on the same infrastructure. Initia's architecture links its Layer 1 with application-specific rollups. Pausing both therefore represents a wider containment measure than disabling a single application or bridge contract. Blockchain shutdowns have increasingly become an emergency response when exploits threaten losses beyond one protocol. In August, Cronos validators halted the blockchain during the Tectonic exploit, preventing most suspected exploit-linked assets from leaving the network while also stopping unrelated transactions.

عنوان اصلی (انگلیسی): Initia Halts Network After Day 0 Bug Enables Unauthorized…

مشاهده‌ی خبر کامل در منبع ↗ بازگشت به کرونوس

این خلاصه به‌صورت خودکار از کوین‌مارکت‌کپ ترجمه شده و ممکن است خطای ماشینی داشته باشد؛ صرفاً جهت اطلاع‌رسانی است و توصیه‌ی معاملاتی نیست.