An exploit of the Secret Network went undiscovered for a week as the hacker moved the loot into Ethereum and then to exchanges. <\/p>\n
An attacker has used an \u201cinfinite mint\u201d bug in a vulnerable smart contract on the Secret Network to create unbacked, wrapp<\/a>ed versions of Axelar-wrapped assets, resulting in a $4.67 million exploit.<\/p>\n The exploit happened on June 10 but was discovered a week later on June 17, after a failed cross-chain transaction caused by an \u201cinsufficient funds\u201d error in the drained account was detected, blockchain research firm Common Prefix reported on Friday.<\/p>\n The attacker redeemed the Axelar-wrapped assets (saTokens) back over legitimate channels to drain the real Axelar-wrapped assets held in escrow because the smart contract did not verify the source of the inbound transfer before minting, so \u201cdeposits forged over an attacker-controlled channel minted genuine saTokens with no assets backing them,\u201d Common Prefix said.<\/p>\n Read more<\/p>\n If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n If you want to read more News<\/a> articles, you can visit our General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n\n