$4.67M Secret Network Exploit Exposes Weakness of Cross-Chain Bridges

A bridge connecting Secret Network and Axelar has been suspended after a reported $4.67 million exploit, highlighting the fragility of cross-chain bridges in cryptocurrency.

The attacker allegedly used forged IBC packets to mint unbacked wrapped assets on June 10, but it wasn't until June 17 that the issue was discovered. The bridge connections were then disabled on June 19 to contain the problem.

The exploit centered on a modified CW20-ICS20 contract used for wrapped assets on Secret Network, which failed to properly verify incoming IBC messages. This allowed the attacker to create a private Cosmos chain and send forged packets to mint unbacked assets such as saUSDT and saUSDC.

The incident serves as a reminder that cross-chain bridges remain one of crypto's most vulnerable infrastructure layers, even when the core networks involved are operating normally.