Secret Network bridge exploited for $4.7M with ‘infinite mint’ bug
The Secret Network cross‑chain bridge was exploited via an "infinite mint" vulnerability that allowed an attacker to create unbacked tokens, moving roughly $4.7 million of value into Ethereum and onward to centralized exchanges. The breach went undetected for about a week as the attacker systematically transferred assets across chains and into fiat on‑ramps, exposing persistent risks in bridge logic, token wrapping models and exchange anti‑money‑laundering (AML) processes.
How the exploit worked and the timeline
Bridges that connect blockchains typically operate by locking or burning assets on the source chain and minting an equivalent representation on the destination chain. The reported vulnerability was an "infinite mint" bug in the Secret Network bridge logic: it allowed creation of representation tokens on a destination network without a corresponding lock or burn on Secret. That produced unbacked supply and permitted the attacker to inflate the bridged token balance.
According to reporting, the exploit was not identified for around a week, during which the attacker moved value into Ethereum and then to centralized exchanges. The week‑long window between exploitation and detection highlights limitations in automated monitoring and alerting for cross‑chain flows, and shows how quickly newly created supply can be laundered through major liquidity corridors when exchanges remain exposed to tainted assets.
Why this matters for the crypto market
The incident underscores systemic vulnerabilities in cross‑chain infrastructure that have direct market consequences. Bridges are critical plumbing for decentralized finance (DeFi), tokenized assets and institutional workflows including custody and settlement. A flaw that enables infinite minting undermines trust in wrapped tokens and pegged representations, potentially destabilizing liquidity pools, AMM pricing and derivatives that reference bridged assets.
For major networks such as Ethereum, receiving unexpectedly minted tokens can introduce on‑chain noise and complicate reconciliation for custodians and market makers. Centralized exchanges that accept bridged tokens face AML and compliance exposure if illicit flows are not detected or are deposited before investigative teams can intervene. The movement of funds into exchanges in this case will likely prompt forensic tracing efforts and could lead to requests for freezing or delisting of affected token representations.
Institutional participants and custodians watching for operational risk may reassess reliance on bridges without robust proofs and faster attestation mechanisms. Market infrastructure providers, including custodial services, prime brokers and settlement layers, may demand stronger assurances such as on‑chain finality guarantees, standardized bridge audits and real‑time monitoring before onboarding bridged assets.
Regulators focused on market integrity and AML supervision are likely to view such incidents as evidence that cross‑chain transfer points require clearer oversight and cooperation from exchanges. Exchanges with strong compliance programs may intensify transaction monitoring and coordination with blockchain forensic firms to minimize the chance that illicit proceeds enter the fiat system.
Market participants will monitor several next steps: forensic tracing reports and any exchange actions to freeze or block the funds, security audits and patch disclosures from Secret Network and its bridge maintainers, and any industry or regulatory guidance on bridge standards. More broadly, observers will watch how bridges, custodians and exchanges adapt operational controls to limit contagion risk and preserve confidence in cross‑chain liquidity.