Login
Sign Up
A sophisticated exploit targeting the Secret Network bridge resulted in the theft of $4.67 million through a critical 'infinite mint' vulnerability within a smart contract. The incident, which occurred on June 10, remained undetected until June 17 when a failed cross-chain transaction triggered by an 'insufficient funds' error exposed the drained account. Blockchain research firm Common Prefix reported that the attacker exploited a logic flaw where the contract failed to verify the source of inbound transfers before minting new tokens. This oversight allowed deposits forged over an attacker-controlled channel to mint genuine saTokens without any underlying asset backing. Data compiled by Woofun AI shows the specific assets targeted included saUSDT, saUSDC, saDAI, saWETH, saWBTC, saWBNB, and sawstETH, all of which were Axelar-wrapped versions of major cryptocurrencies.
The attacker successfully redeemed these forged Axelar-wrapped assets through legitimate channels, effectively draining the real assets held in escrow. Following the extraction, the illicit funds were moved to the Ethereum blockchain and converted into ETH. The proceeds were subsequently fragmented across approximately 30 distinct wallets to obscure the trail before being deposited into centralized exchanges including KuCoin, ChangeNow, and HitBTC. This event marks the latest in a string of crypto protocol hacks this month, with DeFiLlama tracking at least 22 separate incidents. The Secret Network breach ranks as one of the largest, trailing only the Humanity Protocol and Syscoin Bridge exploits, which resulted in losses of $32 million and $8 million earlier in the month.
The Secret Network, a privacy-focused layer-1 blockchain within the Cosmos ecosystem, and Axelar, a decentralized interoperability network, faced immediate scrutiny following the breach. While the Secret Network's native token, SCRT, was not directly impacted by the technical failure, it remains down 99% from its 2021 all-time high, currently trading at $0.058. Similarly, Axelar's native token, AXL, is trading at $0.045, representing a 98% decline from its 2024 peak. Woofun AI notes that the Secret Network issued a stark warning on Saturday, advising holders of Axelar-bridged saXXX tokens on Secret that their backing was compromised and funds may be lost. This advisory underscores the severity of the depegging event for users holding these specific wrapped assets.
Axelar clarified the scope of the incident on Saturday to address confusion regarding the network's integrity. The protocol confirmed that neither Axelar nor the Inter-Blockchain Communication (IBC) standard was compromised. The exploited token smart contract was not developed, deployed, or maintained by Axelar, isolating the vulnerability to a third-party implementation.
Furthermore, Axelar stated that its firewalling mechanisms successfully prevented the impact from spreading to other connected chains. Woofun AI analysis suggests that while the technical containment was effective, the reputational damage and financial loss highlight the persistent risks associated with cross-chain bridge architectures and the critical need for rigorous source verification in smart contract logic.