Injective Halts Blocks for Four Hours on Exploit in Exchange Modules
Injective paused block production after block 181027005 on August 31 for an emergency patch; foundation and CEO statements on scope and user impact.
Injective halted block production after block 181027005 on August 31 for roughly four hours while validators applied the v1.20.3-safeharbor.1 patch.
The patch added an insurance-fund denomination check and disabled binary-options settlement on mainnet.
Foundation and CEO statements
The Injective foundation stated that consensus, native INJ, and staked assets were never compromised and that the attack was limited to binary-options markets in ecosystem applications.
CEO Eric Chen said users are not affected and the incident was contained.
Researchers link approximately $4.9 million bridged to Ethereum that remains in an attacker wallet; no full postmortem has been published.
The exact amount ultimately drained and which party absorbed any shortfall remain undisclosed.
Whether the vulnerable logic resided solely in application code or in protocol modules is disputed.