Skip to main content
AVOID.NET
Sign in

Secret Network / Axelar IBC Bridge Exploit (June 2026)

avoid.net/secret-network-axelar-ibc-bridge-exploit-june-2026→8/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3estdq…Ps3y

Summary

On approximately June 10, 2026, an attacker exploited a missing channel-verification check in a Secret Network-side ICS-20 smart contract governing the Cosmos IBC connection between Secret Network and Axelar, minting unbacked wrapped tokens that were redeemed for approximately $4.67 million in real bridged assets. The exploit went undetected for seven days due to Secret Network's privacy-by-default design, and was only discovered on June 17 when a routine cross-chain transfer failed due to depleted escrow. Axelar's emergency committee severed all Secret and Secret-SNIP IBC connections on June 17; the stolen funds were subsequently laundered through Osmosis, bridged to Ethereum, and deposited across KuCoin, ChangeNow, and HitBTC.

Connected Entities

6 entities · 60 linked investigations
Organizations
□Cosmos (ATOM)42□Ethereum64□ChangeNOW□Secret Network / Axelar IBC Bridge Exploit (June 2026)□Secret Network / Axelar Bridge Exploit June 2026
Tokens
♦KuCoin
Relationships
  • KuCoin→mentioned with→Ethereum(60%)
  • ChangeNOW→mentioned with→Ethereum(65%)
  • Secret Network / Axelar Bridge Exploit June 2026→mentioned with→ChangeNOW(60%)
  • Secret Network / Axelar IBC Bridge Exploit (June 2026)→mentioned with→Secret Network / Axelar Bridge Exploit June 2026(85%)
  • Secret Network / Axelar Bridge Exploit June 2026→mentioned with→Secret Network / Axelar IBC Bridge Exploit (June 2026)(90%)
  • Secret Network / Axelar IBC Bridge Exploit (June 2026)→mentioned with→ChangeNOW(70%)
  • Secret Network / Axelar IBC Bridge Exploit (June 2026)→mentioned with→Cosmos (ATOM)(80%)
  • Secret Network / Axelar Bridge Exploit June 2026→mentioned with→Cosmos (ATOM)(75%)
  • Secret Network / Axelar Bridge Exploit June 2026→mentioned with→Ethereum(60%)
  • Secret Network / Axelar Bridge Exploit June 2026→mentioned with→KuCoin(60%)
  • + 4 more
Also appears in
Saga EVM Blockchain·32Leap Wallet·52MANTRA Chain·10Injective Protocol·55Cosmos (ATOM)·42Osmosis (allBTC / Nomic Bridge Double-Spend Exploit, September 2026)·38Cosmos EVM Vulnerability — August 2026 Six-Chain Exploit·18BNB Chain Bridge·16MANTRA Chain (August 2026 Exploit)·38Tria·42+ 50 more
Have evidence about Secret Network / Axelar IBC Bridge Exploit (June 2026)?
0
Accepted
2
Under review
0
Rejected / revoked

Community submissions

  • Under reviewincriminatingWayback pending6/28/2026, 4:13:22 PM
    https://www.theblock.co/post/405459/secret-networks-axelar-bridge-drained-for-4-67-million-in-infinite-mint-exploit-that-went-unnoticed-for-seven-days

    “The Block reporting on the 4.67M infinite-mint exploit: 7-day detection delay, fund flow traced to KuCoin/ChangeNow/HitBTC, vulnerability in contract since 2023 deployment, Axelar emergency bridge shutdown June 17.”

    — avoid-scout

  • Under reviewincriminatingWayback pending6/26/2026, 10:08:36 PM

    “The Secret Network / Axelar bridge exploit has been confirmed at $4.67M. The June 10 attack went undetected for 7 days because Namada-style encrypted balances obscured the drain on-chain. The attacker created a custom Cosmos SDK chain, opened a forged IBC channel, and minted unbacked wrapped tokens redeemable for real assets. The vulnerability traced to a missing source-channel validation check present since the 2023 deployment. Axelar shut down Secret bridge routes on June 17.”

    — avoid-scout

Timeline(5 events)

10 June 2026

Attacker begins exploit, creating a custom single-validator Cosmos SDK chain, opening a fraudulent IBC channel to the vulnerable ICS-20 contract on Secret Network, and sending forged deposit packets to mint unbacked saTokens redeemable for real Axelar-bridged assets. Seven anomalous transactions later traced to this date.

BanklessTimes / CryptoTimes

10 June 2026

Stolen assets routed through Osmosis, bridged to Ethereum, swapped for ETH via CoW Protocol, split across approximately 30 wallets, and deposited at KuCoin, ChangeNow, and HitBTC.

CryptoTimes

17 June 2026

A routine cross-chain transfer fails due to insufficient escrow balance. Axelar investigators trace the shortfall to the June 10 transactions. Axelar's emergency committee immediately disables Secret and Secret-SNIP IBC connections.

BanklessTimes / CryptoTimes

19 June 2026

Axelar publicly discloses the incident, confirming approximately $4.67 million in losses, the isolation of the breach to the Secret-side ICS-20 contract, and outreach to relevant exchanges and law enforcement agencies. Multiple crypto news outlets report the incident.

Axelar via crypto.news / CryptoTimes / AMBCrypto / The Merkle

20 June 2026

Additional reporting published. No recovery, compensation mechanism, or restoration timeline for Secret Network IBC connections announced. Post-mortem stated to be in preparation.

BanklessTimes
Provenance & Audit Trail
Anchored on SolanaVerify on-chain10 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 10 of 11 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 6/20/2026, 12:03:38 PM

last updated: 7/27/2026, 5:41:15 PM

4 views

avoid.net — verified advice for a post-truth world