AFX Trade lost $24.15 million due to compromised validator keys in a recent security breach, highlighting vulnerabilities in the DeFi sector.
Decentralized exchange AFX Trade experienced a significant security breach, losing $24.15 million after an attacker exploited validator signing keys.
AFX Trade, a decentralized exchange operating on the Arbitrum network, has reported a loss of approximately $24.15 million following a security breach that allowed a hacker to access the validator signing keys for a crucial bridge used by the protocol. This incident underscores the ongoing vulnerabilities in the decentralized finance (DeFi) sector, particularly concerning off-chain components rather than flaws in smart contracts.
According to security experts, the hacker leveraged sufficient hot-validator signatures to authorize the withdrawal of the funds, which were subsequently transferred to Ethereum and converted into about 12,467 ETH. Notably, this breach significantly depleted AFX's total value locked, occurring amidst a troubling trend of high-profile hacks targeting protocols on the Arbitrum network.
Arbitrum officials confirmed that their primary bridge remained secure and that the on-chain logic functioned as intended. The breach stemmed from compromised private keys, maintained off-chain by bridge operators, rather than any direct exploitation of the bridge's coding logic.
Steven Goldfeder, co-founder of Offchain Labs, clarified that the incident did not involve a hack of Arbitrum's native bridge but rather a third-party protocol. He emphasized that the transaction was validated correctly by the smart contract, highlighting the sophistication of the attack that circumvented traditional security measures.
This incident adds to a series of recent security breaches in the crypto space, with Q2 2026 marking one of the worst quarters for hacks. Just a week prior, another exploit drained $18 million from the RWA platform Ostium, indicating a pattern of attacks on Arbitrum-based protocols. Analysts suggest that the focus this year has shifted towards vulnerabilities in off-chain components, posing new challenges for the DeFi ecosystem.
The timing of the attack is particularly notable, as AFX had seen a surge in trading volume leading up to the incident, with daily perpetuals volume reaching multi-month highs in mid-July. The nearly $24 million siphoned off from AFX represented a substantial portion of the protocol's total locked value, suggesting that the attacker struck at a moment of peak liquidity.
