Cross-chain interoperability protocol Axelar has disabled its connection to Secret Network following an exploit that resulted in the loss of approximately $4.7 million in bridged assets. According to reports from AMBCrypto and crypto.news, the incident occurred on June 19 and affected assets bridged over the Inter-Blockchain Communication (IBC) protocol from the Axelar chain to Secret Network. The team identified the issue as isolated to the Secret-side ICS-20 smart contract used in the Cosmos IBC connection between the two networks. Secret Network operates as a privacy-focused blockchain that encrypts transaction data while allowing smart contract code to remain verifiable on-chain, enabling developers to support private cross-chain applications including confidential decentralized finance activity, private NFT transactions, and anonymous governance functions.
As reported by AMBCrypto and crypto.news, Axelar's emergency committee immediately disabled the Secret and Secret-SNIP connections upon becoming aware of the incident. The protocol has also contacted relevant exchanges and law enforcement agencies while investigations continue. According to the initial assessment, the exploit is limited to assets bridged from Axelar to Secret Network through the affected IBC route, with no other IBC connections appearing to be impacted. The team confirmed that no other Secret Network tokens have been affected, and Axelar's core protocol remains unaffected by the incident. The company emphasized that its core protocol remained operational throughout the incident, with the suspected vulnerability isolated to the Secret-side contract involved in processing transfers from Axelar into the Secret ecosystem.
According to AMBCrypto and crypto.news, the incident highlights the complexity of cross-chain infrastructure, where vulnerabilities can arise within specific integrations rather than the underlying bridge network. The protocol's statement suggests the issue originated in the Secret-side ICS-20 contract associated with the Cosmos IBC connection, rather than within Axelar's validator network or core interoperability infrastructure. This distinction could become an important focus of the investigation as both ecosystems work to determine the root cause of the exploit. The latest incident adds to a growing list of bridge-related security events across the crypto sector, with Axelar maintaining that no other parts of the Axelar network appear to be affected based on current findings.
As reported by AMBCrypto and crypto.news, neither Axelar nor Secret Network has released a detailed technical explanation of how the exploit occurred at the time of publication. The protocol stated it is preparing a detailed post-mortem report to provide comprehensive information about the incident and its resolution process. The immediate disabling of connections represents a precautionary measure while investigations continue into the root cause of the security breach. According to Axelar, the exploit appears confined to assets on the Secret Network that were bridged from Axelar, with no evidence currently suggesting that other IBC connections, Secret-native assets, or additional Axelar integrations were affected. Until the investigation is completed, the affected bridge routes will remain disabled as engineers continue reviewing the attack path and assessing the extent of the losses.
The Axelar exploit adds to a growing list of security breaches that have disrupted crypto infrastructure projects in recent weeks. According to Binance Research, DeFi exploits in April alone contributed to roughly $13 billion in total value locked outflows across decentralized finance protocols, reducing available liquidity throughout the sector. The research arm also found that the on-chain leverage ratio climbed to around 38%, a level last seen in 2021, as TVL declined faster than borrowing activity. Earlier this month, Humanity Protocol disclosed recovery measures after a June 8 exploit that forced the project to retire its original H token across Ethereum, BNB Chain, and Humanity Mainnet, while crypto payments platform Pyra announced plans to wind down operations after determining it could not recover from the financial and user impact of the Drift exploit.
