Axelar Network Suffers $670,000 Exploit via Secret Network IBC Bridge

The Axelar Network has reported a security breach involving the unauthorized withdrawal of approximately $670,000 worth of digital assets. The exploit occurred on June 20, 2026, targeting the cross-chain communication infrastructure between Axelar and the Secret Network. Following the detection of the anomaly, the Axelar Incident Response Committee took immediate action to mitigate further losses by suspending specific bridge connections.

Vulnerability in ICS-20 Smart Contract

Preliminary investigations indicate that the breach was localized to the ICS-20 smart contract deployed on the Secret Network side. This contract facilitates the Inter-Blockchain Communication (IBC) protocol, which is a core component of the Cosmos ecosystem used to bridge assets between independent blockchains. The attackers successfully exploited a flaw within this specific bridge implementation to siphon funds that were being moved from the Axelar chain to Secret.

The IBC protocol is designed to allow different blockchains to exchange data and value seamlessly, but vulnerabilities in specific contract implementations can expose bridged liquidity to risk.

Response Measures and Current Status

Upon discovering the suspicious activity, Axelar developers moved to isolate the threat. The following steps were implemented:

• The Secret and Secret-SNIP connections were immediately disabled to prevent further unauthorized transfers.
• The team initiated coordination with centralized exchanges to track the stolen tokens and freeze associated accounts.
• Law enforcement agencies have been notified to assist in the recovery process and identify the perpetrators.

The issue is limited to the ICS-20 smart contract on the Secret side, which is part of the Cosmos IBC connection between Secret and Axelar. The Axelar Incident Response Committee immediately disabled the Secret and Secret-SNIP connections after discovering the incident.

The technical team emphasized that the vulnerability is isolated to the IBC bridge link with Secret Network and does not affect the broader Axelar security architecture or other integrated blockchains. As of the time of reporting, the bridge remains offline while a full forensic audit of the smart contract code is conducted. Users are advised to monitor official social media channels for updates regarding the restoration of services and the status of affected funds.