"Immediately upon becoming aware of the incident, the emergency committee disabled the Secret and Secret-SNIP connections entirely." That's the core of Axelar's official statement after a security breach drained roughly $4.67 million in tokens bridged via the Inter-Blockchain Communication protocol from the Axelar chain to Secret Network. The team moved fast, but the money was already gone.
The vulnerability traces to the Secret-side ICS-20 smart contract, which handles the Cosmos IBC connection between the two networks, specifically the pathway used for assets moving from Axelar over to Secret. ICS-20 is a standard interface within the Cosmos ecosystem built for fungible token transfers across connected chains. When that contract layer gets compromised, an attacker can trigger unauthorized token releases without ever touching the core validator set or consensus mechanism of either chain. That's the precise point Axelar's investigation keeps coming back to: the breach was isolated to this one contract, and everything else, the core protocol, other integrations, other bridge pathways, remained untouched.
Cutting a live bridge connection isn't a routine call. It disrupts real users who depend on that specific pathway for cross-chain transfers, and the decision to do it means accepting that disruption as the lesser cost. Axelar's emergency committee made that call without waiting for a full root-cause analysis, which is exactly the right sequence when an active exploit is draining funds in real time. Stopping the bleeding first, diagnosing the wound second. Beyond the technical shutdown, Axelar confirmed it has reached out to relevant exchanges and law enforcement agencies, a step that suggests the team is pursuing both asset recovery and potential identification of whoever is behind the attack.
At $4.67 million, the loss is significant but contained. The bigger question now is whether any other bridge pathways in the ecosystem share the same underlying contract architecture, and how long it takes Axelar to answer that before reopening the Secret connection.
This article is for informational purposes only and does not constitute financial or investment advice.
