# Initia Blames Leaked GCP Key for $3.27 Million Crypto Theft

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/54357
Published: 2026-11-11T19:15:30.000Z
Updated: 2026-11-11T19:15:30.000Z
Section: Technology

> Another $2.16 million in stolen assets remains on the paused L1, where it cannot be moved.

Initia blamed a leaked Google Cloud Platform (GCP) key for an attack that transferred about $3.27 million in assets and involved forged withdrawals across five Rollups.

The breach took place Nov. 9, Initia said. The key, used to configure private nodes, was exploited through command injection. Initia said attackers used the access to reach its infrastructure, GitHub and GCP accounts, additional credentials and Anvil, a platform that hosts Rollups.

Initia said attackers used their Anvil access to forge Inter-Blockchain Communication (IBC) withdrawals across five Rollups, unlocking assets held in Initia’s L1 IBC custody accounts. About $3.27 million was sent to attacker addresses, while another $2.16 million in stolen funds remains on the paused L1 and cannot be moved. Initia’s L1 was paused Nov. 10.

Initia said attackers sold the assets on its decentralized exchange and withdrew 13,400 TIA, 8,000 USDC.inj and 597,000 Noble USDC. No INIT was transferred.

Initia plans to restore all affected assets and is rebuilding its infrastructure in an isolated environment. The rebuild is expected to take longer than a routine network restart, while recovery efforts continue with law enforcement and security partners.