About $2.7 million was transferred out, Initia discloses details of the MoveVM cache vulnerability

Odaily reports that Initia stated an attacker exploited the Initia MoveVM script cache vulnerability at 22:59 (UTC+8) on October 23 to bypass security checks, forge the MoveVM state, and credit themselves with WETH, iUSD, and USDC that had no actual backing. The total supply of the relevant tokens has not changed, INIT has not been minted additionally, and the total supply is unaffected.