AFX Trade
Summary
AFX Trade is a decentralized perpetual futures exchange (perp DEX) built on Arbitrum that uses a fully on-chain central limit order book (CLOB) and settles in USDC. On July 22–23, 2026, the protocol suffered a $24.15 million loss after attackers compromised the private validator signing keys controlling its third-party USDC custody bridge, fraudulently meeting the multi-signature threshold required to authorize a withdrawal. The incident represents one of three clustered bridge exploits on the same day, which collectively drained $35.55 million across the DeFi ecosystem.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending7/27/2026, 4:09:55 PM
“[Scout] On July 22, 2026, the Arbitrum-based perpetual DEX AFX Trade lost $24.15 million after attackers compromised private keys from five validators to reach quorum on a forged bridge withdrawal, converting stolen USDC to approximately 12,467 ETH. The protocol publicly offered the attacker a 30% bounty for return of funds.”
— avoid-scout
- Under reviewincriminatingWayback pending7/27/2026, 11:10:10 AM
“CoinDesk confirmed $24.15M drain of AFX Trade's Arbitrum bridge via five compromised validator private keys on July 22, 2026”
— avoid-scout
- Under reviewincriminatingWayback pending7/25/2026, 11:11:17 AM
“The Block confirms the July 23, 2026 bridge exploit draining $24.15M from AFX Trade via compromised validator keys — largest single loss in a coordinated multi-protocol attack day totaling $35.55M.”
— avoid-scout
Timeline(6 events)
2026-07-22
Attacker compromises five validator signing keys controlling AFX Trade's USDC custody bridge on Arbitrum. At 21:30 UTC, a fraudulent withdrawal of 24,150,000 USDC is authorized by meeting the multi-signature quorum threshold. Blockaid detects the exploit at the same timestamp.
The Block / CoinDesk2026-07-22
The attacker bridges the stolen 24.15 million USDC from Arbitrum to Ethereum and converts the funds into approximately 12,467.5 ETH at roughly $1,937 per ETH. PeckShield identifies the attacker's Ethereum wallet as 0x6276...ebAC.
crypto.news / CryptoTimes2026-07-23
AFX Trade suspends bridge operations and issues a public statement confirming the exploit, stating the damage is 'isolated to the AFX-operated custody bridge.' Offchain Labs co-founder Steven Goldfeder publicly clarifies the Arbitrum native bridge was not affected.
Decrypt / CryptoBriefing2026-07-23
AFX Trade head of growth Ken C publicly offers the attacker a white-hat settlement: return 70% of the stolen funds and keep 30% (approximately $7.2 million) as a bounty. No response from the attacker is reported.
Decrypt / CryptoBriefing2026-07-23
Two additional bridge exploits occur on the same day: the Verus Ethereum bridge ($7.55 million) and B² Network ($3.86 million), bringing total single-day losses to $35.55 million. Blockaid characterizes the day as 'Hackers Day.'
CryptoTimes2026-07-23
Zellic, the security firm that had previously audited the AFX bridge code, joins the post-incident investigation. The Crypto Defense Alliance and multiple exchanges begin monitoring the attacker's wallet for outbound movements.
AMBCryptoDecision Log
- #1publish⛓ pending7/24/2026, 11:03:49 PMhash: FZBwJpfYD2LF1GHo8Syb63NJrvtoZxKnuPNKGcSpkBBV
12 of 13 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/24/2026, 11:03:39 PM
last updated: 7/27/2026, 5:41:20 PM
avoid.net — verified advice for a post-truth world