TL;DR
- Injective halted block production for nearly four hours after an exploit was detected that compromised native modules of the protocol.
- On-chain researchers estimate that around $4.9M were transferred to Ethereum during the attack and remain in the wallet linked to the attacker.
- The foundation did not publish a complete technical postmortem and did not clarify who absorbed the losses or how the ecosystem fund was replenished.
Injective, the layer-1 blockchain, produced no new blocks for nearly four hours while its validators deployed an emergency patch in response to an exploit that on-chain researchers traced to native modules of the protocol.
The foundation described the event as an “accelerated upgrade” rather than a halt, and stated that the network consensus, the native token INJ, and staked assets were never at risk.
OFFICIAL STATEMENT FROM INJECTIVE
Yesterday, Injective contributors coordinated an accelerated network upgrade that took longer than initially expected to complete across all validators and ecosystem infrastructure.
The Injective blockchain and INJ remained secure throughout…
— Injective 🥷 (@injective) September 1, 2026
The on-chain record shows that block production stopped after block 181027005, registered at 16:09:59 UTC. The researcher known as Earthling Paddy noted that a block prior to the interruption took approximately 37 minutes to process.
Infrastructure provider QuickNode also reported the block height as stalled during the incident. Some validators were temporarily jailed for failing to meet the required upgrade window, while exchanges such as Coinbase and Coins.ph temporarily restricted transfers.
Good to finally see an official statement from @injective — and genuinely good news in it: the exploit is contained and patched, consensus was never compromised, and staked INJ was never at risk. Credit for that.
A few points of precision, though, because I've been documenting…
— Paddy-earthling (@ErthlingPaddy) September 1, 2026
Is Injective Lying?
Paddy challenged the official characterization of the exploit as an isolated issue within ecosystem applications. According to his analysis, the attack used messages originating from the chain’s own native exchange and insurance modules. The emergency patch v1.20.3-safeharbor.1 modified the protocol’s core code by incorporating a denomination check in the insurance fund and disabling binary options liquidation on mainnet, which would place the logic within a protocol module rather than exclusively in external application code.
Researchers estimate that approximately $4.9 million were transferred to Ethereum during the exploit. Paddy indicated that those funds remain in the wallet linked to the attacker and show no activity so far. Injective did not disclose the total amount stolen, did not identify which party absorbed the shortfall, and did not explain how an ecosystem fund that appeared reconstituted after the incident was replenished.
No Postmortem, No Clear Answers
Eric Chen, CEO of Injective, stated that network users were not affected and that the foundation collaborated in the recovery. The absence of a complete technical postmortem leaves central questions unanswered about the true extent of the damage and the transparency of the response process.
