AFX Bridge Exploit Drains $24.15 Million in USDC as Attacker Converts Funds Into 12,467 ETH

A cross-chain bridge operated by decentralized finance protocol AFX suffered a major security breach after an attacker drained approximately $24.15 million in USDC, marking one of the largest crypto exploits recorded this month. The incident occurred on July 22 and was detected by blockchain security firm Blockaid, which said the vulnerability was limited to AFX’s bridge infrastructure rather than the underlying Arbitrum network.

The exploit adds to a growing list of bridge-related security incidents that continue to challenge confidence in decentralized finance. While investigators continue tracing the stolen assets, the exact technical cause of the exploit has not yet been publicly disclosed.

Attack Moves Funds Into Ethereum

According to blockchain security researchers, the attacker quickly transferred the stolen USDC from Arbitrum to Ethereum before swapping the assets into approximately 12,467 ETH. On-chain tracking indicates the converted funds were consolidated into a single Ethereum wallet, suggesting the attacker acted rapidly to reduce exposure to potential asset freezes or recovery efforts.

Security teams have been monitoring the wallet activity while coordinating with ecosystem participants to assess the incident. At the time of writing, there was no confirmation that any of the stolen funds had been recovered or frozen.

The attack targeted AFX’s proprietary bridge rather than Arbitrum’s core infrastructure. As a result, the broader Layer 2 network continued operating normally despite the exploit.

Growing Pressure on DeFi Security

The latest breach underscores the persistent risks surrounding cross-chain bridges, which have remained attractive targets because they often hold significant pools of digital assets while connecting multiple blockchain networks.

The AFX incident also pushes July’s cryptocurrency hack losses to roughly $97 million, surpassing the approximately $75 million recorded during June. The rising losses highlight that bridge security remains one of the industry’s most pressing challenges despite continued investment in audits, monitoring tools, and real-time threat detection.

Market participants will now watch for further updates from AFX regarding the root cause of the exploit, potential recovery efforts, and any compensation plans for affected users. The incident serves as another reminder that operational security continues to be a critical concern as decentralized finance protocols expand cross-chain functionality.