Scan to download
BTC $60,286.80 +1.85%
ETH $1,611.27 +3.21%
BNB $559.55 +2.35%
XRP $1.05 +2.19%
SOL $75.22 +6.96%
TRX $0.3210 -0.23%
DOGE $0.0733 +1.01%
ADA $0.1460 +2.66%
BCH $200.72 +6.37%
LINK $7.40 +2.63%
HYPE $66.93 +9.75%
AAVE $91.93 +1.18%
SUI $0.6999 +3.93%
XLM $0.1751 +3.03%
ZEC $407.06 +9.66%
BTC $60,286.80 +1.85%
ETH $1,611.27 +3.21%
BNB $559.55 +2.35%
XRP $1.05 +2.19%
SOL $75.22 +6.96%
TRX $0.3210 -0.23%
DOGE $0.0733 +1.01%
ADA $0.1460 +2.66%
BCH $200.72 +6.37%
LINK $7.40 +2.63%
HYPE $66.93 +9.75%
AAVE $91.93 +1.18%
SUI $0.6999 +3.93%
XLM $0.1751 +3.03%
ZEC $407.06 +9.66%

axelar

All
Article
Flash

Secret Network lost 4.67 million dollars due to a cross-chain vulnerability, and the attack went undetected for seven days

The blockchain research organization Common Prefix disclosed that on June 10, hackers exploited a vulnerability in the Secret Network and Axelar cross-chain bridge contract to forge deposits and mint uncollateralized tokens, subsequently cashing out approximately $4.67 million.The attack went undetected for seven days until a normal cross-chain transfer failed due to insufficient funds in the escrow account on June 17, revealing the anomaly. The root of the vulnerability lies in the fact that when the contract changed from an escrow model to a minting model, it deleted two key functions responsible for verifying the source of transfers, and it had never undergone an external audit since its deployment in early 2023. Secret Network pointed out that the Axelar bridging infrastructure failed to trigger any effective anomaly monitoring or emergency pause mechanism before the assets were stolen on a large scale.The stolen funds were routed through Osmosis to Ethereum and exchanged for ETH on CoW Protocol, then dispersed into exchanges such as KuCoin, ChangeNow, and HitBTC. Currently, approximately $672,000 remains in the attackers' Axelar wallet. Secret Network has requested Axelar to freeze that address, but the request was denied. Axelar emphasized that its core protocol was never affected, and the exploited contract was not developed or maintained by Axelar. Currently, Axelar has disabled the related cross-chain connections and stated that it is coordinating follow-up actions with exchanges and law enforcement agencies.

Axelar responds to security incident: Axelar and IBC are unaffected, the vulnerability originates from a third-party token contract's "infinite minting" issue

The cross-chain protocol Axelar Network released a statement regarding the recent security incident related to Secret Network, stating that there is a misunderstanding within the community about the event. Both Axelar and the Inter-Blockchain Communication Protocol (IBC) were not attacked or compromised. The affected token smart contracts were neither developed, deployed, nor maintained by Axelar, and Axelar's firewall mechanism also prevented the impact from spreading to other chains.It is reported that the exploited contract is a forked version based on CW20-ICS20, but the developers removed two core security checks, resulting in an "infinite minting" vulnerability. By deleting the verification mechanisms originally used to prevent such issues, this fork altered the original trust model of the contract and did not undergo a new security audit.Axelar Network explained that anyone can deploy contracts for cross-chain asset wrapping through IBC, and similar contracts have also been used to wrap tokens from other chains into Secret Network. However, the Secret side fork version in this incident has vulnerabilities due to the removal of key security checks. This incident is not a unique logical flaw, nor is it an issue with the IBC protocol itself, but rather a security risk introduced by modifications to third-party contracts.

Axelar Network was hacked, and approximately 4.67 million dollars worth of tokens were stolen

Axelar Network stated on platform X that an event affecting assets bridged from the Axelar chain to the Secret Network via IBC has been discovered, with approximately $4.67 million worth of tokens stolen.According to the information currently available, the issue is limited to the ICS-20 smart contract on the Secret side, which is part of the Cosmos IBC connection between Secret and Axelar, used to bridge assets from Axelar to Secret. The Axelar Emergency Committee immediately disabled the Secret and Secret-SNIP connections upon discovering the incident. The team is contacting relevant exchanges and law enforcement agencies. The incident is limited to assets bridged from Axelar to Secret via IBC. Other IBC connections or Secret tokens do not appear to be affected. Other Axelar integrations are unaffected. The core protocol of Axelar is not impacted.Additionally, according to Common Prefix's analysis of the Secret Network incident, an attacker exploited an infinite minting vulnerability in a modified CW20-ICS20 token contract on Secret, stealing approximately $4.67 million. The attacker minted arbitrary Secret-wrapped Axelar assets on Secret by launching a new Cosmos chain (with only one validator) and self-relaying IBC packets to it. The contract did not verify which IBC channel the inbound tokens came from. The attacker exited through the Axelar bridge. The Axelar protocol was not compromised and prevented the spread of contagion to other chains.

Circle announces the acquisition of Axelar's initial development team Interop Labs and its intellectual property, accelerating the layout of cross-chain interoperability

USDC issuer Circle has announced that it has signed an agreement to acquire the Interop Labs team and its proprietary intellectual property. This acquisition is expected to be completed in early 2026. Circle looks forward to contributing to the broader interoperability space and continuing to explore opportunities that align with its vision of an open, interconnected, and scalable on-chain economy.Interop Labs has been a key contributor to Axelar, one of the most advanced frameworks in cross-chain communication and token transfer, and has been driving the core development of Axelar alongside a growing community of open-source contributors. By directly integrating the talent and technology of Interop Labs into Circle, the aim is to accelerate the advancement of two core initiatives: the first is Arc—Circle's blockchain layer designed for enterprise applications, committed to becoming the operating system of the internet economy;The second is the cross-chain transfer protocol. It is important to clarify that this transaction only involves the Interop Labs team and its proprietary intellectual property. As this team joins Circle, the Axelar network, foundation, and AXL token will continue to operate independently under community governance, and the open-source intellectual property will remain open. Another contributor to the Axelar project, Common Prefix, will take over the relevant work of Interop Labs.

Axelar Foundation discloses the completion of a $30 million AXL token sale

ChainCatcher news, according to The Block, the Axelar Foundation has announced a strategic AXL token sale worth $30 million. The foundation stated on Tuesday that several cryptocurrency investors participated in this token sale, including Arrington Capital, Distributed Global, Electric Capital, Laser Digital, C² Ventures, Plassa Capital, and Wagmi Ventures. However, the foundation declined to disclose the sale price or valuation of the AXL tokens. The Axelar Foundation plans to expand the use of dollars through stablecoins and support the institutional tokenization of real-world assets (RWA) via its interoperability protocol.A spokesperson for the foundation stated that these investments were made "in recent months." "Part of the investment involves purchasing unlocked AXL tokens from the Axelar Foundation's community project allocation, which will be subject to a new lock-up period ranging from six to twelve months." This means that the Axelar Foundation is not the only seller in this transaction. The spokesperson declined to disclose the identities of other sellers. Other sellers may have facilitated the transaction through over-the-counter (OTC) trading, where investors acquired AXL tokens that are already in circulation.According to the foundation's spokesperson, the latest $30 million investment announced by the Axelar Foundation, combined with the previous $100 million raised through multiple rounds of financing and a public token sale, further increases its total investment amount.
app_icon
ChainCatcher Building the Web3 world with innovations.