A recent setback for active DeFi ecosystem participants Decisionpermanent trading platform AFX Trading suffered a major security breach targeting one of its private bridges. Blockchain security firm Blockade It first detected the incident around 21:30 UTC on July 22, 2026, reporting that attackers stole approximately $24.15 million in 2020. US Dollar affected by the contract.
AFX Trade operates as a USDC settled derivatives exchange. Decision Network that offers users leveraged trading opportunities in various assets.
Deposits and withdrawals are generally routed through private bridge infrastructure, which held approximately $24.2 million in USDC ahead of the event; This means almost all of the locked value, according to DeFiLlama. data.
use It effectively freed up most of those funds by highlighting vulnerabilities that could arise even in established Layer 2 environments.
Blockaid detected an exploit in targeting 2026-07-22 21:30 UTC @AFX_XYZa protocol @arbitrum. The exploit was specific to a bridge operated by AFX. Approximately 24.15 million USDC has been withdrawn from the protocol so far.
Our team works with incredible people… https://t.co/0Qd9ve5gPB
— Blockaid (@blockaid_) July 22, 2026
Importantly, the breach was limited to AFX Trade’s own bridging implementation and did not involve Arbitrum’s native bridging infrastructure.
Steven Goldfederco-founder Off-chain Laboratories (The team behind Arbitrum) quickly addressed the community’s concerns.
He confirmed that the suspicious transaction originated from a third-party protocol and emphasized that Arbitrum’s underlying bridging system remains secure and uncompromised.
The Arbitrum team is actively investigating with the affected parties.
Blockade It works closely with Arbitrum developers and AFX Trade to manage the response, investigate the root cause, and explore options for containing or recovering stolen assets.
On-chain observers, including PeckShield and Lookonchain, tracked the attacker’s next moves: Ejaculated USDC quickly Ethereum mainnet and converted approximately 12,467 ETH with an average price around $1,937.
The funds are now located at an address controlled by the attackers; This is a common tactic to hide tracks and hinder emergency rescue efforts.
This event underscores the persistent challenges bridges face in DeFi. These components often rely on complex smart contract logic and cross-chain messaging while protecting large pools of assets, making them attractive targets.
AFX Trade’s bridge has seen increased deposits in recent weeks; This increase from around $19.3 million in mid-June likely increased its visibility to potential rivals.
The incident follows other recent security incidents at Arbitrum, such as the mid-July exploit that affected Ostium’s vault.
Although no official statement was posted on AFX Trade’s social channels shortly after the breach, users and the wider ecosystem have been waiting for updates regarding compensation plans, advanced improvements and enhancements. security measures or any forensic findings.
Market reactions were relatively limited in the immediate aftermath, with minimal movement in the ARB. ETH prices.
However, such exploits could undermine trust in protocol-specific infrastructure and lead to increased scrutiny of bridge designs in Arbitrum-based projects.
Developers and users are reminded of the importance of strict controls, continuous monitoring, and diversified risk management in decentralized trading environments.
While investigations continue, this case serves as another reminder of the evolving threat landscape at Layer-2 DeFi. Protocols need to prioritize robust, isolated security for ancillary components such as bridges to protect user funds and maintain ecosystem trust.
