AFX Trade on Arbitrum Suffers Bridge Exploit Attack on July 22, Losing Approximately $24.15 Million USDC
AFX DEX Stolen Approximately $24.15 Million
The derivatives protocol AFX Trade on Arbitrum suffered a bridge exploit attack on July 22, resulting in a loss of approximately $24.15 million USDC. The attacker subsequently bridged the funds to Ethereum and exchanged them for about 12,467 ETH.
This incident follows the announcements from BitMEX and BitMart regarding their closures, leading the community to speculate that more exchanges may be under pressure; there is also mention of a theft incident in early 2025 involving approximately $60 million to $85 million, consistent with the attack on Phemex's hot wallet.
The incident has highlighted the concentrated exposure of security risks in DeFi bridging and centralized exchanges, benefiting security audits and cold wallet solutions, while high leverage and multi-chain hot wallet platforms are under pressure.
Source: Public Information
ABAB AI Insight
The breach of the AFX bridge stems from a validator key or supply chain attack, rather than an issue with the native Arbitrum bridge, highlighting the ongoing vulnerability of third-party bridging infrastructure.
In terms of resource mobilization, the protocol team has proposed a white-hat bounty and plans for a goodwill compensation scheme, motivated by the need to control reputational damage and user loss, while investigations indicate that the attack may be related to known threat organizations.
Similar patterns can be seen in recent cases of bridge and exchange hot wallet thefts, with the industry currently in a phase of frequent security incidents accelerating market clearing.
Essentially, this is a matter of technological replacement and capital concentration: insecure bridges and hot wallets are being eliminated, as the mechanism is that when the cost of attack is lower than the cost of defending vulnerabilities, funds concentrate towards safer custodial and on-chain solutions.
ABAB News · Law of Cognition
Bridging is the most vulnerable throat of DeFi
Security incidents often occur in batches
The larger the hot wallet, the higher the risk of theft