Secret Network exploited for $4.67M — Axelar-wrapped assets unbacked
By John Nada·Jun 22, 2026·4 min read
$4.67M drained from Secret Network via a smart contract flaw. Axelar-wrapped assets left unbacked. How will networks enhance security?
A flaw in the Secret Network's smart contract enabled an attacker to mint unbacked Axelar-wrapped assets, resulting in a $4.67 million loss. It wasn't until a failed transaction, flagged by an "insufficient funds" error, that the breach was discovered, as reported by blockchain research firm Common Prefix.
The attacker cleverly maneuvered the system, redeeming these unbacked saTokens via legitimate channels to extract the real Axelar-wrapped assets held in escrow. The smart contract did not verify the source of the inbound transfer, allowing for deposits to be forged over an attacker-controlled channel.
The exploit occurred on June 10 and went unnoticed until a week later, highlighting a significant delay in detection that allowed the perpetrator ample time to move the exploited assets. The Secret Network, known for its emphasis on privacy and built on the Cosmos ecosystem, became a key target in this wave of attacks affecting various protocols.
June has been a torrid month for crypto protocols, with this incident marking at least the 22nd hack, according to DeFiLlama. In comparison, the Humanity Protocol and Syscoin Bridge faced even larger hacks, losing $32 million and $8 million respectively. Secret Network, a privacy-focused blockchain built on Cosmos, was the scene of this latest significant breach.
The assets minted without backing covered a variety, including saUSDT, saUSDC, saDAI, saWETH, saWBTC, saWBNB, and sawstETH. The attacker moved these to Ethereum, converting them to Ether and distributing them across around 30 wallets before depositing the funds into exchanges like KuCoin, ChangeNow, and HitBTC, as per Common Prefix.
The Secret Network issued a caution to holders of Axelar-bridged saXXX tokens, warning that their backing was compromised. However, the network's own token, Secret (SCRT), was not directly impacted by the exploit. Still, it's a tough time for SCRT, trading 99% down from its all-time high.
Nasdaq Surges 2.7% as Micron Awaits PCE Data Impact
Nasdaq gains 2.
Interestingly, Axelar distanced itself from the compromised contract, asserting their systems weren't breached. The exploited smart contract was neither developed nor maintained by Axelar, and their measures contained the damage, preventing it from spreading to other chains. The reassurance did little to buoy Axelar's own token, AXL, which is 98% down from its peak.
The incident underscores the critical importance of smart contract security in the crypto ecosystem. The ability of an attacker to exploit a vulnerability to such a devastating effect reveals the potential risks associated with complex decentralized systems. The exploit leveraged an "infinite mint" bug, a particularly dangerous type of flaw that allows for unlimited creation of tokens without the necessary collateral backing.
As the crypto world grapples with these breaches, the question looms — how will networks bolster their defenses to prevent the next vulnerability from being exploited? The ongoing challenge for blockchain networks is to maintain the balance between innovation and security. With the increasing complexity of decentralized applications, ensuring robust security measures becomes paramount to protect against such exploits.
In the broader context of the crypto industry, the Secret Network exploit adds to the growing list of high-profile security breaches that have plagued various projects. The cumulative impact of these incidents not only affects the specific networks involved but also shakes investor confidence across the sector.
Furthermore, the method of moving stolen assets to Ethereum and subsequently spreading them across multiple wallets before depositing them into exchanges is a common tactic employed to obfuscate the trail of illicit funds. This strategy complicates efforts to trace and recover stolen assets, presenting a significant challenge for law enforcement and blockchain analytics firms.
As blockchain technology continues to evolve, the need for enhanced security protocols and real-time monitoring systems becomes increasingly evident. The Secret Network case serves as a stark reminder of the vulnerabilities that can exist within smart contracts and the potential consequences of their exploitation. The crypto community must remain vigilant and proactive in addressing these security challenges to ensure the integrity and trustworthiness of decentralized networks.