Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It
Analysis
Price Impact
MedA $24 million exploit on arbitrum's afx trade, which involved a usdc bridge and resulted in the theft of eth, could negatively impact the sentiment around arbitrum and defi security in general. while the amount is significant, it's not large enough to drastically affect the overall market cap of eth or usdc. however, it highlights ongoing risks in the defi space.
Trustworthiness
HighPrice Direction
BearishExploits and hacks in defi tend to create fear and uncertainty, leading to short-term selling pressure on affected assets and potentially broader market sentiment. while arbitrum and the involved stablecoin (usdc) are unlikely to see a long-term sustained drop from this single incident, the immediate reaction is likely to be negative.
Time Effect
ShortThe immediate impact of such news is usually felt within the first few days or weeks as the market digests the event. over time, if no further exploits occur and security measures are improved, the market tends to recover.
Original Article:
Article Content:
In brief AFX Trade, a perpetuals exchange on Arbitrum, was drained of about $24 million in an exploit that hit a USDC bridge the protocol itself operates. The exchange said the breach was isolated to that bridge and the exact attack vector is still under investigation; on-chain trackers say the funds were swapped for 12,468 ETH. AFX has halted the bridge and publicly offered the attacker a deal—return 70% of the funds and keep the rest as a "white hat bounty." AFX Trade, a decentralized perpetuals exchange on Arbitrum that settles in the stablecoin USDC, was drained of $24.15 million on Wednesday in an exploit that hit a bridge the protocol operates, security firm Blockaid said. In a tweet , AFX said the exact attack vector remains under investigation. The on-chain money trail shows that the attacker bridged the stolen USDC to Ethereum and swapped it for 12,468 ETH, now sitting in a single wallet , PeckShield said. AFX is aware of an incident involving the AFX-operated USDC custody bridge on Arbitrum. Upon detecting the incident, we immediately suspended bridge operations and initiated our incident response procedures. Our engineering and security teams are actively investigating the root… — AFX Trade (@AFX_XYZ) July 23, 2026 Arbitrum moved fast to put distance between itself and the protocol. Co-founder Steven Goldfeder said the network's native bridge "has not been hacked or exploited in any way," and that the transaction came from a third-party protocol. A breach of Arbitrum's own bridge would ripple across the entire layer-2; a compromised app sitting on top of it is a contained failure. AFX suspended bridge operations and said the damage looked "isolated to the AFX-operated custody bridge," noting that neither its trading infrastructure and mainnet, nor the Arbitrum network itself, had been compromised. The firm added that it was working with ecosystem partners and security firms to trace the stolen assets. Hours later, AFX's head of growth, Ken C, offered the attacker a way out : return 70% of the haul and keep the other 30% as a "white hat bounty." Such public pleas have become a recurring feature of crypto exploits—Solana's Drift Protocol tried the same after its $285 million hack in April. The theft extends a brutal year for DeFi , which has lost more than $840 million to hacks in 2026. It lands close to home, too, with fellow Arbitrum perpetuals venue Ostium drained of $18 million through a compromised oracle key just a week earlier. Daily Debrief Newsletter Start every day with the top news stories right now, plus original features, a podcast, videos and more. Your Email Get it! Get it!