$25M Bridge Hack: AFX Unveils Goodwill Plan After Developer Compromise

A DeFi protocol called AFX has announced a goodwill plan to compensate users affected by a recent $24.15 million bridge hack. The plan, which was finalized after a technical investigation into the incident, will be released on August 3rd. According to AFX, the breach was caused by a social engineering campaign against one of its developers, who was tricked into cloning a malicious software repository.

The attacker then used the compromised device to gain access to internal development systems and eventually stole $24.15 million from an AFX-operated custody bridge on July 22nd. The stolen funds were later converted into approximately 12,467 ETH on Ethereum.

AFX's investigation found that the attack relied on trusted development tools and infrastructure rather than vulnerabilities in smart contracts or blockchain security. The protocol has since rebuilt affected infrastructure, rotated operational credentials, and increased monitoring sensitivity to prevent similar incidents in the future.