ChainCatcher 消息，Initia 在 X 平台发帖称，攻击者于 10 月 23 日 22:59（UTC+8）利用 Initia MoveVM 脚本缓存漏洞绕过安全检查，伪造 MoveVM 状态，为自己记入无实际支撑的 WETH、iUSD 和 USDC，相关代币总供应量未发生变化；INIT 未被增发，总供应量不受影响。
网络暂停前，攻击者已转出约 270 万美元资产，包括通过 LayerZero 转出的 105 枚 WETH 和约 140 万枚 AUSD0，以及通过 Noble 和 CCTP 转出的约 108 万枚 USDC，随后兑换为 1135.52 枚 ETH，目前存放于以太坊地址 0x358ef0130f7a5aa516dcd81bdc80b18cde41cac8。Initia 表示，安全修复预计将在数天内完成并通过审计，资产追回工作正与安全合作伙伴推进，L1 及 Rollup 仍处于暂停状态，后续将发布完整事后复盘报告。
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.