AFX Trade Arbitrum Bridge Suspected of Being Hacked for 24.15 Million USDC 3 Hours Ago
AFX Trade Arbitrum Bridge Attacked
The Arbitrum bridge of Perp DEX AFX Trade is suspected to have been hacked for 24.15 million USDC 3 hours ago.
USDC flowed out of the bridge abnormally and was cross-chained to Ethereum.
Subsequent Fund Operations
The attacker exchanged the funds for approximately 12,467.4 ETH at a price of $1,937.
Market Mechanism
Driven by the bridge security incident, the attacker quickly cashed out ETH, causing funds to flow out of the Arbitrum ecosystem, putting pressure on Perp DEX and third-party bridge projects, while benefiting the native Arbitrum bridge and security audit services in the short term.
Source: Public Information
ABAB AI Insight
As a perpetual DEX on Arbitrum, AFX Trade previously relied on third-party bridges for USDC. This attack is suspected to have exploited a vulnerability in the multi-signature verification mechanism, similar to past cases where cross-chain bridge signature keys or thresholds were breached. The Arbitrum team has clarified that this is not an issue with their native bridge.
In terms of capital flow, the attacker directly exchanged for ETH after cross-chaining to achieve rapid liquidity realization, motivated by the desire to avoid the risk of stablecoin freezing. The project and bridge operators face user fund losses and a crisis of trust, highlighting the security risks of outsourcing DeFi bridging.
Similar historical events like Gravity Bridge or Nomad Bridge have shown that third-party bridge risks are common in Japanese or Korean projects. AFX Trade is currently in a phase of Layer 2 DeFi expansion, but its infrastructure security is lagging.
Structural Judgment
This essentially relates to regulatory changes. The multi-signature mechanism of cross-chain bridges is vulnerable to internal or external breaches, pushing the industry towards native bridges and intentional architectures. The mechanism lies in the tension between centralized verification and decentralized execution, prompting capital to concentrate from high-risk third-party bridges to mature Layer 2 native solutions, while accelerating regulatory scrutiny of bridging services.
ABAB News · Law of Cognition
Multi-signature is not security; it is a delayed single point of failure.
The bridge is the throat of funds; whoever controls the bridge controls the flow.
Stablecoin freezing forces out ETH paths; attackers are always one step ahead of the rules.