AFX Bridge Exploit Drains $24.15M USDC as Attacker Buys 12,467 ETH
Blockaid said the on-chain logic was not bypassed, and five hot-validator signatures authorized the withdrawal before the stolen funds were swapped into about 12,467 ETH.
- On Wednesday, July 22, 2026, an attacker drained $24.15 million in USDC from a cross-chain bridge operated by AFX Trade on Arbitrum by compromising validator signing keys.
- Offchain Labs co-founder Steven Goldfeder confirmed that the attack targeted a third-party bridge operated by AFX rather than Arbitrum's native infrastructure, which remains unaffected by the incident.
- The attacker bridged the stolen USDC to Ethereum and swapped the funds for about 12,467 ETH, which now sits in a single wallet, according to on-chain trackers.
- Several protocols, including AFX, Verus, and Balance, suffered exploits within 24 hours for a combined total exceeding $35 million, according to security firms Blockaid and PeckShield.
- Compromised off-chain keys, rather than smart contract bugs, remain a primary cause for recent crypto security failures, necessitating better audits of administrative permissions and validator signing processes.
26 Articles
26 Articles
Three crypto protocols lose $35.55mn in day of bridge exploits
Three crypto protocols lost $35.55mn in 24 hours, with AFX Trade drained of $24.15mn after bridge validator keys were compromised. July hack losses have reached roughly $97mn, ahead of June's $75.32mn.
Arbitrum-Based AFX Trade Drained of $24 Million
AFX Trade, a decentralized perpetuals exchange that runs on Arbitrum and settles in the stablecoin USDC, was drained of roughly $24.15 million on Wednesday after an attacker exploited a bridge it operates. The exploit was not a smart contract failure. Five of the AFX’s custody bridge’s hot-validator signatures approved the withdrawal, clearing the roughly two-thirds quorum the bridge requires, according to Legalblock security chief Vladimir S.. …
AFX Trade’s Arbitrum Bridge Drained of ~$24.15M in USDC After Validator Key Compromise - The Cryptocurrency Post
A decentralized perpetuals exchange operating on Arbitrum lost approximately $24.15 million in USDC after security gaps in a cross-chain bridge it operates were exploited. The incident, first flagged at 21:30 UTC on July 22, 2026, targeted AFX Trade’s custom bridge infrastructure rather than the underlying settlement layer. Exploit tx: https://t.co/XPN25gbZp4Target bridge contract: 0x71518580f36feceffe0721f06ba4703218cd7f63 Funds were transferr…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium











