Axelar has confirmed a security breach resulting in the loss of approximately $4.67 million in tokens, affecting assets transferred from its chain to the Secret Network via the Inter-Blockchain Communication (IBC) protocol. The company has enacted emergency measures, including the immediate shutdown of the compromised connection to prevent further losses.
According to Axelar's official statement, the breach was isolated to a specific component of the bridge infrastructure, particularly the ICS-20 smart contract on the Secret side. This contract manages the connection between Secret Network and Axelar, facilitating token transfers across chains. The vulnerability allowed unauthorized token release without breaking the core validator or consensus mechanisms on either chain.
Tactical Emergency Response
Upon detection of the incident, Axelar’s emergency committee acted swiftly, disabling the Secret and Secret-SNIP connections to halt any additional exploitation. This decisive action, while disruptive to legitimate cross-chain transfers, aims to contain the breach and protect users by stopping further unauthorized access. Additionally, Axelar is notifying exchanges and law enforcement to track and potentially freeze the stolen assets, aiding in recovery efforts.
Scope of the Breach
Axelar has made clear that the core protocol remains unaffected, focusing on the security of the broader ecosystem while mitigating the immediate threat posed by the compromised contract. The company is conducting a thorough investigation to ascertain the exact vulnerabilities exploited and ensure that no other pathways are similarly at risk.
- Incident involved approximately $4.67 million in tokens.
- Attack targeted the ICS-20 smart contract on the Secret Network.
- Emergency measures have included disabling relevant connections.
This material is informational and not financial advice.
