Initia halts its L1 again after an attacker used compromised rollup infrastructure keys to fake IBC transfers out of bridge escrow, moving about $615K off-chain
- This is Initia's second halt in under three weeks, after the Oct 23 MoveVM mint exploit (about $2.7M).
- The lesson for bridge and rollup operators: escrow on the hub trusts whatever the rollup's keys sign, so those keys need the same HSM, quorum and monitoring treatment as the escrow itself.
- Initia warns users to ignore unofficial links and "refund" messages.
Sources: Initia on X: L1 halt statement (Nov 10, 2026) · Initia on X: rollup infrastructure issue (Nov 9, 2026)