Axelar has reported a significant security breach involving its connection to the Secret Network, where an attacker exploited a vulnerability to steal around $4.67 million. The issue stemmed from an "infinite mint" flaw within a modified CW20-ICS20 token contract on the Secret Network.
Upon analysis, it was revealed that the attacker was able to create unlimited Secret-wrapped Axelar assets by activating a new Cosmos chain with just one validator and manipulating the contract's functions.
— Common Prefix (@CommonPrefix) June 19, 2026
This incident went undetected for a week, during which the attacker was able to falsify deposits and issue tokens lacking proper backing.
The Axelar emergency committee took swift action by disabling connections to both the Secret Network and Secret-SNIP to prevent further unauthorized transactions. The team is actively collaborating with exchanges and law enforcement to track and recover the stolen funds.




