Tools Crypto Exploit Tracker exploit-0018
Exploit record
AFX Trade Bridge Exploit
- Loss
- $24M
- Attack vector
- Access Control
- Chain
- Arbitrum
- Sector
- Derivatives
What happened
On 23 July 2026, AFX Trade, a decentralised perpetuals exchange settling in USDC, lost about $24.15M after attackers compromised the validator signing keys behind a bridge it runs on Arbitrum and authorised withdrawals. The team suspended bridge operations.
Arbitrum confirmed its own native bridge was not involved; the failure was in AFX's own bridge and its key handling. The stolen USDC was moved to Ethereum. It was the largest of three protocol losses logged on the same day.
Sources
- YFarmX reportyfarmx.com/crypto-bridge-attacks-36m-keys-not-cryptography/
- Arbitrum statementarbitrum.io
- BlockAid detectionwww.blockaid.io
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026