Grafa
Secret Network exploit mints $4.7M assets
Image for illustrative purposes only. Not a real photo.

Secret Network exploit mints $4.7M assets

Share
  • An attacker exploited a smart contract flaw on Secret Network to mint unbacked assets and steal approximately US$4.67 million.
  • The incident affected Axelar-wrapped assets held in escrow, while Secret Network's native SCRT token was not directly impacted.
  • The exploit highlights ongoing security risks in cross-chain infrastructure as crypto protocol attacks continue across the sector.

Secret Network (CRYPTO:SCRT) suffered a US$4.67 million exploit after an attacker used an “infinite mint” vulnerability to create unbacked Axelar-wrapped assets and redeem them for real assets held in escrow.

The exploit occurred on June 10 but remained undetected until June 17 when a failed cross-chain transaction triggered an investigation, according to blockchain research firm Common Prefix, making it one of at least 22 crypto protocol exploits reported this month.

“If you hold Axelar-bridged saXXX tokens on Secret, please be aware their backing was affected, and your funds may be lost,” said Secret Network.

The attacker minted unbacked versions of assets including saUSDT, saUSDC, saDAI, saWETH, saWBTC, saWBNB and sawstETH after exploiting a smart contract that failed to verify the source of inbound transfers before issuing new tokens.

The stolen assets were moved to the Ethereum (CRYPTO:ETH) blockchain, converted into Ether and distributed across about 30 wallets before being deposited into exchanges including KuCoin, ChangeNow and HitBTC, while SCRT was trading around US$0.058 following the incident and Axelar (CRYPTO:AXL) was trading near US$0.045. Following the announcement the Secret Network share price was unchanged at $0.058.

Secret Network is a privacy-focused layer-1 blockchain built within the Cosmos ecosystem, while Axelar operates an interoperability network designed to connect different blockchain ecosystems and facilitate cross-chain asset transfers.

Axelar later stated that neither its network nor the Inter-Blockchain Communication protocol had been compromised and said the affected token contract was not developed, deployed or maintained by Axelar, adding that its security measures prevented the incident from spreading to other chains.

At the time of reporting, Secret price was $0.0576.

Frequently asked questions

Grafa is not a financial advisor. You should seek independent, legal, financial, taxation or other advice that relate to your unique circumstances.

Grafa is not liable for any loss caused, whether due to negligence or otherwise arising from the use of or reliance on the information provided directly or indirectly, by use of this platform.