The Initia network temporarily stopped producing blocks after an attack that exploited a previously unknown flaw in its MoveVM execution environment. According to reports, the attacker created unbacked tokens worth about 2.7 million dollars in AUSD, ETH and USDC and moved them off the network through bridges. The native INIT token was not affected. The project team is investigating the incident.

What it means: The attack shows a common problem with newer blockchains: flaws in the execution environment, the software that runs smart contracts, affect every application on the network at once. When someone can create tokens out of nothing, the damage does not stay on that network but spreads through bridges to other chains, where the fake tokens are swapped for real ones. Halting the chain limited the losses, but it also shows that such a network can be frozen by a small group, which conflicts with the image of full decentralisation. For Greek users and companies holding funds on such networks, bridges and wrapped tokens should be treated as an extra risk, since their value depends on the security of more than one system. Spreading funds and avoiding large amounts on young networks without a long security record are sensible measures. For development teams, the incident is a reminder that auditing contract code is not enough if the execution environment itself has not been reviewed in depth. Monitoring for unusual token creation can shorten the response time to similar attacks.

Read the original on The Block

Related service: Consulting

Related stories