A crosschain bridge exploit targeting the decentralized perpetual exchange AFX Protocol drained $24.15 million on Wednesday. The breach struck the Arbitrum-based platform late in the evening. Security monitors triggered alerts immediately.
Blockaid officially detected the vulnerability at 9:30 p.m. UTC, confirming the timeline of the attack. The hacker moved fast. They bridged 24.15 million USDC directly to the Ethereum blockchain before converting the assets.
On-chain data revealed the exact financial mechanics of the exit. The attacker used the stolen USDC to purchase 12,467 ETH at an average price of $1,937. That tracking data and the resulting network fallout were verified by market monitors shortly after the conversion.
The breach forced Offchain Labs to play defense. Co-founder Stephen Goldfeder posted a public statement on X confirming the vulnerability was strictly isolated to a third-party protocol. He stated clearly that the native Arbitrum bridge remained secure and unexploited.
Offchain Labs Isolates Arbitrum From Third-Party Bridge Failures
Goldfeder’s rapid intervention points to a specific structural tension in decentralized finance. Independent protocols operating on major Layer 2 networks carry their own distinct risks, but their failures often drag down the host network’s public reputation. By explicitly walling off the native Arbitrum bridge from the AFX Protocol collapse, Offchain Labs established a hard line for institutional liquidity providers. The core infrastructure held. The third-party connection did not.