AFX Trade, a decentralized perpetuals exchange on Arbitrum, lost $24.15 million in USDC due to an exploit on its custom custody bridge. The attacker compromised validator keys, swapped the stolen USDC for ETH on Ethereum, and AFX has offered a bounty for the funds' return.

The exploit highlights ongoing security vulnerabilities in cross-chain bridge infrastructure within the DeFi space, leading to significant asset losses and prompting offers of bounties to attackers.
AFX Trade, a decentralized perpetuals exchange on the Arbitrum network, lost approximately $24.15 million in USDC due to an exploit on its custom custody bridge. Security firm Blockaid detected the breach, which involved compromised validator signing keys that met the required 5-of-7 signature quorum. The attacker bridged the stolen USDC to Ethereum and swapped it for 12,467 ETH. Arbitrum's co-founder Steven Goldfeder confirmed that the network's native bridge was unaffected, emphasizing the incident was isolated to AFX Trade's third-party protocol. AFX Trade has suspended bridge operations and offered the attacker a bounty to return 70% of the stolen funds.