Secret bridge exploit analysis

On June 10, 2026 an attacker minted a large quantity of Axelar-bridged assets on Secret Network using an infinite-mint bug in the bridge's smart contract, and redeemed them over legitimate channels for roughly $4.67 million. The exploit was not detected until June 17, when a cross-chain transaction failed with an "insufficient funds" error that exposed the imbalance. The Cointelegraph report cited blockchain research firm Common Prefix for the technical detail.

How the mint worked

The bridge contract did not verify the source of the inbound transfer before minting wrapped assets. The attacker forged deposits over an attacker-controlled channel, which the contract credited as genuine, minting unbacked saTokens. Those saTokens were then redeemed through the bridge's normal release flow, draining real Axelar-wrapped assets from escrow. The minted set included saUSDT, saUSDC, saDAI, saWETH, saWBTC, saWBNB and sawstETH.

Why the loss went unnoticed

Because the assets taken were all already on Secret Network as wrapped versions, the bridge's accounting showed nothing obviously wrong until someone tried to move funds back to Axelar and the escrow ran out. The Secret Network's warning was that "if you hold Axelar-bridged saXXX tokens on Secret, please be aware their backing was affected and your funds may be lost." Axelar shut down the Secret Network bridge routes afterwards.

Laundering

The attacker moved the proceeds to Ethereum, converted to ETH, split the haul across around 30 wallets, and deposited at KuCoin, ChangeNow and HitBTC. The Secret Network's native SCRT token was not directly affected but dropped around 9 percent on the news.

Where it sits in the corpus

The week-long detection lag is the distinguishing feature. Most 2026 bridge drains were caught within hours: the Gravity Bridge exploit was halted the same morning, and the Taiko exploit was paused by the protocol team before more than the initial loss was extracted. A week between event and detection is rare, and is what made the $4.67 million figure possible.