And the most alarming thing isn't the amount. It's that nobody noticed it for 7 days. 👀
⚙️ HOW DID THEY DO IT?
The attacker found a modified contract on Secret Network that was minting wrapped Axelar tokens without actually verifying where the transfers were coming from 🕳️
So they did something brilliantly malicious: they created their own Cosmos chain with a single validator, opened an IBC channel to the vulnerable contract, and sent fake packets with denominations that the contract accepted as legitimate
Result: saUSDT, saUSDC, saDAI, saWETH, saWBTC, saWBNB, and sawstETH tokens minted out of thin air — and exchanged for real assets in the Axelar escrow 💸
📅 THE TIMELINE THAT CONCERNS:
* June 10: attack executed quietly.
* June 17: a failed transfer exposes that the escrow was empty.
* June 19: Axelar disables the emergency bridge.
7 days of free window — enough to move funds across Osmosis, Ethereum, CoW Protocol, and distribute them into 30 different wallets before anyone noticed. 🕵️
⚠️ THE DETAIL THAT MAKES IT WORSE:
The vulnerability wasn't new — researchers tracked the bug back to the original contract deployment in 2023.
A migration in March 2026 added new functionalities but kept the same validation flaw untouched.
And no external audit was requested for the integration. 🔍
🌐 THE CONTEXT OF THE MONTH:
This exploit comes amid a brutal streak: at least 22 hacks of crypto protocols recorded just in June 2026, including Kelp DAO ($292M) and Syscoin Bridge ($8M).
Bridges remain the weakest link in the whole industry. 🔗
💡 THE LESSON THE INDUSTRY DOESN'T LEARN:
✅ Axelar confirmed that its core protocol was never compromised. ⚠️ Secret Network admitted that the origin validation functions were removed when adapting the contract. 🔴 Holders of saTokens on Secret: your funds may be at risk — follow the official channels.
Bridges are the banks of the crypto ecosystem. 🏦🔓 And they keep getting built without the proper vaults.
Should bridges require mandatory audits before every contract migration? 👇
#SecretNetwork #Axelar #Hack #DeFiSecurity #CryptoSecurity $AXL $USDT
