Arbitrum DEX AFX Trade Drained of $24M, Offers Hacker 30% Bounty
AFX Trade, an Arbitrum perpetuals exchange, lost $24.15 million after its USDC bridge was exploited. The attacker swapped funds for 12,468 ETH. AFX suspended operations and offered a 30% white hat bounty for return of remaining funds. The incident highlights ongoing DeFi security challenges.
Quick Take
AFX Trade's USDC custody bridge drained of $24.15 million in an exploit.
Hacker swapped USDC for 12,468 ETH, now held in a single wallet.
AFX suspended bridge, offered attacker 30% bounty for returning 70% of funds.
DeFi losses in 2026 exceed $840 million amid rising protocol exploits.
Market Impact Analysis
BearishExploit on a single protocol's bridge may cause short-term bearishness for AFX and cautious sentiment on Arbitrum DeFi, but limited systemic risk.
Speculation Analysis
Key Takeaways
- AFX Trade's USDC custody bridge on Arbitrum was drained of $24.15 million in a targeted exploit.
- The attacker immediately converted the stolen stablecoins into 12,468 ETH, now consolidated in one wallet.
- AFX suspended the bridge and publicly offered the hacker a 30% white hat bounty to return the remaining 70%.
- The theft pushes 2026 DeFi losses past $840 million, following a similar $18M oracle hack on Arbitrum's Ostium last week.
- Arbitrum confirmed its native rollup bridge was not compromised; the breach was isolated to AFX's own infrastructure.
What Happened
AFX Trade, a decentralized perpetuals exchange on Arbitrum, was hit by a bridge exploit on July 23. The attacker drained $24.15 million in USDC from the protocol's own custody bridge, then bridged the funds to Ethereum and swapped them for 12,468 ETH. The ETH now sits in a single wallet, according to on-chain data. AFX immediately halted bridge operations and launched an investigation, confirming that its trading infrastructure and the Arbitrum network itself were not compromised. The exchange is working with security firms to trace the stolen assets and has publicly offered the hacker a deal: return 70% of the funds and keep 30% as a white hat bounty.
The Numbers
The $24.15 million theft was fully converted into ETH—12,468 coins worth roughly the same amount at swap time. This single address now holds the entire haul. The exploit adds to a brutal year for DeFi: over $840 million has been lost to hacks in 2026. Just last week, fellow Arbitrum perpetuals platform Ostium lost $18 million through a compromised oracle key. AFX's 30% bounty offer mirrors moves made after other major hacks, like Solana's Drift Protocol following its $285 million exploit in April.
Why It Happened
The exact attack vector remains under investigation, but bridge vulnerabilities are a recurring theme in DeFi. AFX's bridge was a custody model—meaning it held user deposits in a smart contract, creating a single point of failure. Perpetual DEXs, which manage complex trading logic, often underinvest in bridge security, leaving them exposed. The incident highlights the risks of protocol-operated bridges versus native layer‑2 infrastructure, which remained secure.
Broader Impact
The hack sows caution across Arbitrum's DeFi landscape, though Arbitrum's own rollup bridge was untouched. It may spur calls for stricter auditing standards and insurance cover. AFX's public bounty offer sets a negotiation precedent, but there's no guarantee the hacker will respond. With DeFi exploits mounting, regulators could accelerate scrutiny of protocol security practices.
What to Watch Next
- Whether the attacker accepts the 30% bounty or moves to launder the ETH through mixers.
- AFX's disclosure of the root cause and any plans to compensate affected users.
- Potential ripple effects across Arbitrum's DeFi ecosystem and other bridges.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
