AFX Trade Loses $24 Million to USDC Bridge Exploit; Exchange Offers Attacker 30% White Hat Bounty

Arbitrum Perpetuals Exchange Loses $24 Million to Bridge Exploit

AFX Trade, a decentralized perpetuals exchange built on the Arbitrum layer-2 network and operating with transactions settled in USDC stablecoin, announced a significant security breach affecting its infrastructure. According to AFX Trade’s official statement and corroborating analysis from security firm Blockaid, attackers exploited a vulnerability in the USDC custody bridge that AFX operates, draining the platform of approximately $24.15 million. The vulnerability was confined to AFX’s own bridge infrastructure rather than affecting Arbitrum’s underlying network or AFX’s core trading systems, meaning the incident represented an isolated failure rather than a network-wide compromise. AFX Trade’s engineering and security teams have initiated investigations to determine the precise attack vector used to breach the custody bridge.

Once the attacker gained access to the stolen funds, they quickly moved the USDC across to the Ethereum network, where they converted it into 12,468 ETH, according to on-chain tracking performed by security firm PeckShield. The converted cryptocurrency now sits in a single wallet under the attacker’s control. AFX Trade immediately suspended all bridge operations to prevent any further unauthorized fund transfers and confirmed that both the exchange’s trading infrastructure and the Arbitrum network itself remained secure and uncompromised by the incident. This swift action effectively contained the damage to the isolated custody bridge component.

Exchange Initiates Unusual Public Negotiation With Attacker

Facing the security incident head-on, AFX Trade adopted a negotiation-based recovery strategy that has become increasingly common in cryptocurrency exploit responses. Ken C, the exchange’s head of growth, publicly announced an offer to the attacker: retain 30% of the stolen funds as a “white hat bounty” in recognition of identifying the vulnerability, while returning the remaining 70% to AFX Trade and its users. This approach is predicated on the theory that attackers motivated by financial incentives might be persuaded to cooperate on asset recovery rather than attempting to liquidate or obscure the stolen funds.

Public negotiation appeals have emerged as a recurring response mechanism in the cryptocurrency sector’s largest exploits. When Solana’s Drift Protocol experienced a $285 million security breach in April, it similarly offered attackers a financial incentive to return portions of the stolen assets. While such public pleas cannot guarantee successful recovery, they reflect a pragmatic recognition that negotiation may sometimes succeed where legal remedies are limited in the decentralized finance space.

Persistent Vulnerabilities Plague Decentralized Finance Ecosystem

The AFX Trade breach represents the latest incident in a troubling expansion of security vulnerabilities affecting decentralized finance platforms. Data compiled across 2026 reveals that DeFi protocols have suffered cumulative losses exceeding $840 million to various exploits and hacks. The timing and nature of the AFX incident gains additional significance given its occurrence on the Arbitrum network, where security breaches have become increasingly frequent. Notably, just one week prior to the AFX exploit, another Arbitrum-based perpetuals trading venue called Ostium suffered an $18 million loss after attackers managed to compromise an oracle key essential to the protocol’s operation.

These consecutive incidents highlight deeper systemic vulnerabilities embedded across decentralized finance infrastructure. Weaknesses span multiple components including bridge protocols that move assets between networks, oracle systems that supply price data, and custody mechanisms designed to hold user funds. As DeFi platforms continue scaling to handle larger volumes of user capital and manage increasing transaction complexity, the scope of potential attack surfaces expands alongside the economic incentives for sophisticated attackers to identify and exploit newly discovered weaknesses in protocol design and implementation.

Persistent breaches in DeFi infrastructure undermine confidence across the broader cryptocurrency ecosystem, creating regulatory pressure and systemic risks that extend beyond Arbitrum to all digital asset markets.

Source: AFX Trade, via Decrypt. Not financial advice.