Axelar

Secret

Osmosis

<ul>
 <li>Axelar stated the exploit originated from a forked Secret Network contract that removed key token minting safeguards.</li>
 <li>The vulnerability enabled attackers to mint unbacked assets and drain escrowed funds through legitimate bridge channels.</li>
 <li>Axelar disabled Secret Network connections after discovery and said no other chains or core protocol components were affected.</li>
</ul>
<p>Axelar Network has moved to clarify its role in a $4.67 million exploit linked to Secret Network, stating that neither Axelar nor the Inter-Blockchain Communication (IBC) protocol suffered a compromise. The <a href="https://www.commonprefix.com/blog/secret-network-exploit" rel="noopener noreferrer nofollow">clarification</a> followed a postmortem from Common Prefix, which traced the June 10 incident to a vulnerable smart contract on Secret Network. According to Axelar, the exploited contract was not developed, deployed, or maintained by its team.</p>
<h2 class="wp-block-heading" id="strong-axelar-points-to-modified-secret-contract-strong"><strong>Axelar Points To Modified Secret Contract</strong></h2>
<p>According to Axelar, the <a href="https://cryptofrontnews.com/aave-moves-to-tighten-asset-risk-rules-across-markets/" rel="noopener noreferrer nofollow">exploited contract</a> was a fork of the CW20-ICS20 implementation used to wrap assets arriving through IBC. The company said developers removed two core security checks that normally prevent unauthorized token minting.</p>
<p>As a result, the modified contract allowed an "infinite mint" vulnerability. Axelar noted that the altered version changed the contract's trust assumptions but did not undergo a new security audit.</p>
<p>Common Prefix reached a similar conclusion in its investigation. The research firm found that the contract minted Secret-wrapped assets, known as saTokens, without validating the source channel of inbound transfers.</p>
<p>That flaw allowed an attacker to create a single-validator Cosmos chain and open an IBC connection to the contract. The attacker then sent forged packets carrying approved token denominations and received legitimate saTokens without collateral backing them.</p>
<h2 class="wp-block-heading" id="strong-seven-day-gap-delayed-discovery-strong"><strong>Seven-Day Gap Delayed Discovery</strong></h2>
<p>The exploit affected seven assets, including <a href="https://cryptofrontnews.com/blockchain-association-files-genius-act-stablecoin-comments/" rel="noopener noreferrer nofollow">saUSDT</a>, saUSDC, saDAI, saWETH, saWBTC, saWBNB, and sawstETH. According to Common Prefix, the attacker redeemed those assets through Axelar's legitimate channel and withdrew funds held in escrow.</p>
<div id="media_image-7" class="widget widget_media_image cfn-widget cfn-banner cfn-banner-article cfn-banner_728"><a href="https://t.me/EliteFXLabs" rel="noopener noreferrer nofollow"><img width="1280" height="698" src="https://cryptofrontnews.com/wp-content/uploads/2026/04/EliteFXLabsBanner-0.webp" alt="EliteFXLabs Banner"></a>
</div>
<p>Notably, investigators traced the vulnerability to the contract's original deployment in early 2023. A March 5 migration retained the same missing validation checks. The theft remained unnoticed until June 17. At that point, a routine cross-chain transfer failed because the escrow account lacked sufficient funds.</p>
<p>Secret Network stated that encrypted balances made the shortfall difficult to detect. The network also said the functions responsible for verifying transfer sources were removed during an earlier contract redesign.</p>
<h2 class="wp-block-heading" id="strong-axelar-disables-connections-after-discovery-strong"><strong>Axelar Disables Connections After Discovery</strong></h2>
<p>Following the discovery, Axelar disabled its Secret and Secret-SNIP connections. In addition, cross-chain router Squid removed Secret Network from its interface.</p>
<p>Axelar maintained that its firewalling measures prevented the issue from spreading beyond the affected contract. The company added that no other chains, escrow accounts, channels, or components of its core protocol were impacted.</p>
<p>Meanwhile, Common Prefix traced the stolen assets through Osmosis and <a href="https://cryptofrontnews.com/ethereum-foundation-backs-internet-freedom-funding-round/" rel="noopener noreferrer nofollow">Ethereum</a> before exchanges and law enforcement became involved. Axelar said it continues coordinating with relevant parties while keeping the affected connection offline.</p>
<p>The post <a href="https://cryptofrontnews.com/axelar-network-clarifies-4-67m-secret-network-bridge-exploit/" rel="noopener noreferrer nofollow">Axelar Network Clarifies $4.67M Secret Network Bridge Exploit</a> appears on <a href="https://cryptofrontnews.com" rel="noopener noreferrer nofollow">Crypto Front News</a>. Visit our website to read more interesting articles about cryptocurrency, blockchain technology, and digital assets.</p>

Axelar Network Clarifies $4.67M Secret Network Bridge Exploit

Table of Contents

CFN

Other articles published on Jun 21, 2026

Join our free newsletter for daily crypto updates!