Details of the Exploit

AFX Trade, a decentralized exchange for crypto and stock perpetuals, experienced a significant security breach targeting its custody bridge on the Arbitrum network. The attacker drained roughly $24.15 million in USDC from the bridge before transferring the funds to Ethereum. Once on Ethereum, the stolen USDC was converted into approximately 12,467 ETH, valued at around $24.16 million at the time.

Blockchain security firms, including PeckShield, tracked the movement of the assets. The attacker’s Ethereum wallet address has been publicly identified, allowing investigators and monitoring services to observe any further activity. As of the latest reports, the stolen funds remain in the attacker’s control without additional large withdrawals noted.

AFX Response and Containment Measures

Upon detecting the incident, AFX Trade quickly suspended all activity on the affected bridge and activated its incident response protocol. The protocol confirmed that the breach was isolated to its third-party custody bridge, with no impact on its main trading infrastructure or the broader Arbitrum network.

Steven Goldfeder, co-founder of Offchain Labs, the team behind Arbitrum, stated that the attack did not involve the network’s native bridge. Investigations by firms such as Blockaid and Zellic, which had previously audited the bridge, are underway to determine the exact attack vector.

AFX continues to collaborate with security partners, including the Crypto Defense Alliance and SlowMist, to monitor the funds and pursue recovery options. Users of other AFX services remain unaffected based on current assessments.

Broader Implications for Crypto Bridges

This incident adds to a series of high-profile attacks on third-party bridges in decentralized finance. While Arbitrum’s core infrastructure stayed secure, the compromise highlights ongoing vulnerabilities in external cross-chain protocols that handle significant asset volumes.

Similar exploits in recent months have targeted connected bridge infrastructure rather than the underlying layer-1 networks themselves. Security experts emphasize the importance of rigorous audits and robust safeguards for such systems as cross-chain activity grows.