Arbitrage Platform AFX Trade Loses $24 Million After Bridge Key Breach

Another week, another multi‑million dollar hack in DeFi, this time stemming from an off‑chain breach rather than a smart‑contract flaw.

AFX Trade, a decentralized perpetuals exchange that settles in the USDC stablecoin, suffered a loss of roughly $24.15 million on Wednesday after attackers compromised the validator signing keys used by a bridge operating on Arbitrum, according to on‑chain data.

In this incident, the smart contract performed as intended — verifying signatures and executing transactions — but the root cause lay with the private keys that generate those signatures. Attackers gained control of the hot validator signing keys held off‑chain by the bridge operators.

Steven Goldfeder, co‑founder of Offchain Labs, which maintains the Arbitrum network, emphasized that the native Arbitrum bridge “has not been hacked or exploited in any way” and that the compromised transaction originated from a third‑party protocol.

A breach of Arbitrum’s own bridge would pose systemic risk across the entire layer‑2 ecosystem, whereas a compromise of a protocol built atop it represents a more isolated failure.

No vulnerability was found in the bridge’s underlying code logic. Bridges are blockchain tools that enable token transfers between networks that may not have native support for one another.

Source link