CoinJie.com reports that GoPlusSecurity said attackers exploited an infinite minting vulnerability in a modified cw20-ics20 token contract on Secret Network, stealing assets worth approximately $4.67 million. The victim was Axelar. The three transactions involved WETH, USDT, and WBTC, and these assets were bridged to the Axelar network. The attack occurred on June 10, and Axelar and Secret publicly disclosed the incident to the community on June 19.

WAXL1.14%
WBTC0.94%
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 5
  • 1
  • Share
Comment
Add a comment
Add a comment
TokenomicsTailor
· 5h ago
Secret Network previously promoted privacy computing, but in the end, basic contract security was not maintained, which is a bit ironic.
View OriginalReply0
RetroRadioSignal
· 5h ago
The cross-chain bridge has had another incident, $4.67 million just disappeared without a trace.
View OriginalReply0
PublicBlockchainUnderTheAurora
· 5h ago
Axelar and Secret took 9 days to disclose, where was the community's right to know?
View OriginalReply0
GateUser-ecf4759e
· 5h ago
WETH, USDT, WBTC all got hit, none of the three major mainstream assets are spared, this attack surface is quite targeted.
View OriginalReply0
Semi-MatureGovernanceVote
· 5h ago
Is the audit of these heavily modified contracts like cw20-ics20 really reliable? How did such a basic vulnerability like infinite minting make it onto the mainnet?
View OriginalReply0
  • Pinned