#World Cup Predictions: 100,000 USDT Daily #2026 World Cup Posting Challenge on HTX Square #HTXCommunity4thAnniversary Secret Network's cross-chain bridge to Axelar has been suspended after an attacker exploited a years-old minting flaw to drain $4.67 million in wrapped tokens over seven undetected days.
Both teams disclosed the incident on June 19, confirming approximately $4.67 million in assets were taken from the bridge's Axelar-to-Secret IBC connection. The attack itself began on June 10 but went unnoticed for seven days until a routine cross-chain transfer failed because the bridge's escrow account had been depleted.
Minting Flaw
The vulnerability lived in a modified CW20-ICS20 smart contract deployed on Secret Network for the Axelar bridge connection. Security research firm Common Prefix published a technical breakdown of the incident, finding that two critical validation checks had been commented out from the contract's packet-receive function: one that should have verified incoming token denominations against the legitimate source channel, and one that should have capped outflows to amounts genuinely held in escrow.
全部評論0最新熱門