AFX Trade Hack: Validator Keys Compromised on Arbitrum Network

A recent hack on AFX Trade has exposed vulnerabilities in DeFi's off-chain infrastructure. The trading platform, which operates on the Arbitrum network, lost approximately $24.15 million in USDC after an attacker compromised the validator signing keys behind a bridge the protocol uses.

The incident occurred on July 22, 2026, when security firm Blockaid flagged the exploit at 21:30 UTC. The attacker gained control of the validator signing keys for AFX's USDC custody bridge and, with enough signatures to meet the threshold needed to approve the transfer, withdrew the funds without triggering any bugs in the on-chain logic.

Steven Goldfeder, co-founder of Offchain Labs (the team behind Arbitrum), stated that the network's native bridge had not been hacked or exploited in any way. This distinction is important, as a breach of Arbitrum's own bridge would have rippled across the entire Layer 2 ecosystem.

AFX has suspended the compromised bridge and made a public offer to the attacker: return 70% of the stolen assets and keep the remaining 30%. The team posted a specific Ethereum address for the return, but it is unclear whether the attacker will accept this proposal.