AFX Protocol Loses $24.15 Million in Third-Party Bridge Exploit

AFX Protocol, also known as AFX Trade, is a decentralized perpetual-futures exchange deployed on Arbitrum. Like many DeFi platforms, it relies on cross-chain infrastructure to move assets between networks, exposing users to risks beyond the underlying blockchain itself. Bridges have long been prime targets because they connect separate chains and often control large pools of funds. The incident highlights the distinction between vulnerabilities in third-party applications and the security of Arbitrum’s core infrastructure.

Reports on July 23, 2026, said an attacker exploited a vulnerability in a third-party bridge used by AFX Protocol and stole about $24.15 million in USDC before swapping the proceeds into ETH. Blockchain security firm Blockaid estimated the loss at roughly $24 million. Offchain Labs, the developer of Arbitrum, said Arbitrum’s native bridge was not compromised and that the breach was confined to the external protocol, limiting the direct impact on the network’s official bridging system.