Approximately $2.7 million was transferred out; Initia discloses details of the MoveVM cache vulnerability

Odaily: Initia stated that on October 23 at 22:59 (UTC+8), an attacker exploited a vulnerability in the Initia MoveVM script cache to bypass security checks and forge MoveVM state, crediting themselves with WETH, iUSD, and USDC that had no actual backing. The total supply of the relevant tokens has not changed, INIT was not minted additionally, and the total supply is unaffected.