Initia Suspends Network After Second Breach in Three Weeks Drains $3.27 Million

Attackers stole about $3.27 million from blockchain network Initia through a compromised Google Cloud Platform key, its second breach in under three weeks. A November 10 command injection exposed environment variables and GitHub and cloud accounts, which attackers then used to run fraudulent IBC withdrawals across five rollups via its Anvil infrastructure. Initia said about $2.16 million remains on its suspended network while recovery continues with law enforcement and security partners.

Why it matters: The incident shows how a single leaked cloud key and an injection flaw can cascade into full infrastructure compromise, which is a lesson in secrets management and pipeline hardening for any ops team.