Digital Asset
Intelligence
Security Incident · ETH Ecosystem

AFX Bridge Private Key Leak: $24.15M Reported Loss

·Historical incident record

Incident Overview

The AFX-operated cross-chain/USDC custody bridge on Arbitrum was exploited. The attacker used compromised validator hot keys to meet the quorum and drain approximately $24.15 million USDC. The funds were bridged to Ethereum and swapped for ETH. Arbitrum’s native bridge was unaffected, and AFX’s core trading infrastructure remained secure. The team suspended bridge operations and is investigating with security partners.

Sources & References

Original incident referencehttps://x.com/AFX_XYZ/status/2080126901205770734 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 7,540,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 542,000
  3. Incident date
    Target

    Triple-A

    Attack methodHot Wallet Compromise
    Reported loss$ 11,800,000
  4. Incident date
    Target

    42DAO

    Attack methodPrice Oracle Manipulation
    Reported loss$ 915,000
  5. Incident date
    Attack methodValidation Flaw
    Reported loss$ 98,000