Secret Network Bridge Exploited for $4.67M in Infinite-Mint Attack

Secret Network has confirmed a significant security incident involving its Axelar bridge, which was exploited to drain approximately $4.67 million. The attack exploited a vulnerability allowing for an “infinite-mint” of tokens, essentially creating an unlimited supply out of thin air within the bridge’s smart contracts.

An infinite-mint vulnerability allows a smart contract to generate tokens without adhering to predefined limits. In the context of a cross-chain bridge, which locks assets on one chain and mints equivalent representations on another, a compromised minting function can lead to catastrophic losses. The attacker in this incident leveraged this flaw to mint and likely swap a substantial amount of tokens before the issue was identified.

The exploit began around June 20, 2026, and remained undetected for seven days. After discovery, the Secret Network and Axelar teams patched the vulnerability and shifted focus to investigating transaction logs to understand the full extent and assist in potential fund recovery.

This incident underscores the complex security considerations in cross-chain bridge technology. While bridges enable interoperability, their intricate design can introduce vulnerabilities. The loss highlights the need for robust security auditing, continuous monitoring, and rapid incident response protocols for all projects involved in cross-chain communication.

Both teams have pledged to keep the community updated on the investigation. The incident prompts a closer look at security measures surrounding cross-chain infrastructure to fortify systems against future threats and enhance user safety across the decentralized web.

Source: https://bitcoinist.com/02-secret-network-axelar-bridge-drained-in-infinite-mint/