Initia said an attacker exploited compromised cloud credentials to move $3.27 million in crypto assets, with about $2.16 million remaining frozen on its halted network.
Layer-1 blockchain network Initia confirmed Wednesday that it has suffered its second security exploit in less than three weeks, with an attacker stealing about $3.27 million in crypto assets after compromising the platform’s cloud infrastructure.
On Wednesday, Initia said the attacker gained unauthorized access on Monday through a command injection attack involving a compromised Google Cloud Platform key. The company said the breach exposed environment variables, allowing the attacker to access Initia’s GitHub and cloud accounts and obtain additional credentials.
According to Initia, the attacker accessed Anvil, a platform hosting rollups, and validated fraudulent Inter-Blockchain Communication (IBC) withdrawals from five rollups, releasing assets held in the network’s escrow accounts.
Read more
If you liked the article, do not forget to share it with your friends. Follow us on Google News too, click on the star and choose us from your favorites.
If you want to read more News articles, you can visit our General category.
