AFX Trade Loses $24 Million After Bridge Key Compromise

On July 22, 2026, AFX Trade, a decentralized perpetuals exchange operating on Arbitrum, was drained of about $24.15 million after an attacker compromised the validator signing keys for a bridge that the protocol uses. According to security firm Blockaid, the withdrawal was approved by five hot-validator signatures, which collectively met the quorum required for authorizing transactions. Importantly, Arbitrum stated that its native bridge remained secure and was not involved in the breach.

Blockaid noted that the on-chain logic operated as intended; the bridge did not malfunction but was instead manipulated by the attacker. Following the theft, the attacker converted the stolen USDC to approximately 12,467 ETH, nearly emptying AFX Trade's total value locked (TVL). This situation comes amid a string of security incidents affecting various Arbitrum-based protocols, following a separate $18 million exploit involving the oracle of another platform, Ostium.

“The Arbitrum native bridge has not been hacked or exploited in any way,” stated Steven Goldfeder, co-founder of Offchain Labs, which maintains the Arbitrum network. He emphasized that the transaction was executed through a third-party protocol, signifying a localized exploit rather than a fundamental flaw within Arbitrum itself. The incident underscores vulnerabilities that can arise in external protocols even when the underlying layer-2 infrastructure remains intact.

Further complicating matters, this incident marks a series of security breaches in the crypto industry this quarter, which has seen a concerning rise in the frequency and severity of attacks. The approximately $24 million loss at AFX Trade echoes the earlier loss of around $285 million by Drift Protocol, where attackers gained privileged access rather than exploiting code vulnerabilities.

As the crypto space continues to grapple with these challenges, stakeholders are left to ponder the implications of such incidents. Protecting validator keys and ensuring robust security measures will be critical in preventing similar occurrences in the future.