AFX Bridge Exploited for $24.15 Million USDC
The AFX-operated cross-chain custody bridge was exploited, resulting in a loss of $24.15 million USDC. The attacker compromised validator hot keys to drain the funds, which were then swapped for ETH.
The AFX-operated cross-chain/USDC custody bridge on Arbitrum was exploited, leading to a significant loss of approximately $24.15 million USDC. The attacker utilized compromised validator hot keys to achieve the necessary quorum and drain the funds, which were subsequently bridged to Ethereum and swapped for ETH.
In response to the incident, AFX suspended bridge operations and is currently investigating the breach in collaboration with security partners. It is noted that Arbitrum’s native bridge and AFX’s core trading infrastructure remained secure during this incident.
Addresses in this incident
| Address | Chain | Role | Check |
|---|---|---|---|
| 0x627654B2782BFc57580ecd11d40869B350b6EBaC | ETH | mentioned in coverage | Check live |
Roles are attributed to the source that stated them. Addresses without an attributed role are listed because coverage mentioned them, not because we assign them a part in the incident.