Secret Network has confirmed a major security incident involving its Axelar bridge, which was exploited to drain approximately $4.67 million. The attack exploited a vulnerability that allowed an “infinite number” of coins, essentially creating an unlimited supply of nothing inside the bridge. Smart contracts.
- Secret Network’s Axelar bridge was hacked, resulting in a loss of $4.67 million.
- The attacker exploited a vulnerability in the bridge’s smart contracts.
- The problem was not discovered for seven days before mitigation measures were deployed.
- The vulnerability has since been patched, and teams are investigating to recover the assets.
This vulnerability, which appears to have started on June 20, 2026, remained undetected for seven full days. This extended period allowed the attacker to continue his actions before the Secret Network and Axelar teams were alerted and able to implement fixes. The official disclosure detailing the incident and steps taken can be found on file statement From the underground community.
How did the Infinite-Mint vulnerability work?
The infinity vulnerability, in essence, allows a smart contract to create tokens without adhering to pre-defined limits. In the context of a cross bridge, this could be disastrous. Bridges are designed to secure assets on one chain and issue equivalent representations on another chain. If the mining function is compromised, an attacker can mint an unlimited number of these representation tokens on the destination chain, effectively reducing the value of the asset and draining value from the assets locked on the source chain. The attacker in this incident was able to take advantage of this minting flaw and potentially swapped a large amount of tokens before the issue was identified.
Address breach and recovery efforts
After the discovery, both the Secret Network and Axelar teams were actively involved in addressing the consequences. The immediate priority was to patch the vulnerability to prevent further exploitation. With the smart contract now secured, the focus has shifted to conducting a comprehensive investigation. This includes analyzing transaction logs to fully understand the scope of the exploit and to assist in the potential recovery of stolen funds. This collaborative effort highlights the critical need for coordinated responses when security incidents occur within the region Decentralized finance Ecosystem.
Address security challenges across the chain
This incident is a timely reminder of the complex security considerations inherent in cross-chain bridge technology. While bridges are vital for facilitating interoperability and extending the utility of different blockchains, their complex design can inadvertently introduce significant vulnerabilities. The $4.67 million loss underscores the continued importance of robust security auditing, continuous monitoring systems, and rapid incident response protocols for all projects involved in cross-chain communications. Ensuring the integrity of these essential parts of the DeFi infrastructure is critical to protecting user assets and maintaining trust across the broader cryptocurrency community.
Looking to the future after the accident
Both the Secret Network and Axelar teams pledged to keep their communities updated on the progress of their investigations. The incident prompts a closer look at security measures surrounding infrastructure across the chain. Ongoing work aims to fortify these systems against future threats, thus enhancing user safety and contributing to the overall stability of the interconnected decentralized web. The challenge of securing digital assets across multiple independently managed networks remains a key focus area for the industry.
This article was written by the News Desk and edited by Samuel Ray.
Editing process Bitcoinist focuses on providing well-researched, accurate, and unbiased content. We adhere to strict sourcing standards, and every page is carefully reviewed by our team of senior technology experts and experienced editors. This process ensures the integrity, relevance, and value of our content to our readers.
