Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It

A recent security incident has compromised the custody bridge operated by AFX, a protocol within the Arbitrum ecosystem. The exploit did not target the Arbitrum network directly but affected AFX's custody infrastructure, leading to the theft of approximately $24 million. Following the breach, the stolen funds were swiftly moved to the Ethereum blockchain, raising concerns about cross-chain security vulnerabilities.

The incident underscores the risks associated with custody solutions in DeFi protocols, especially those handling large sums of assets. AFX has publicly offered the hacker a 30% bounty in exchange for the return of the stolen funds, a common tactic in the crypto security community to recover assets without further conflict.

This breach is believed to have been caused by a vulnerability in AFX's custody bridge, which was exploited to drain funds without compromising the underlying Arbitrum network itself. The swift movement of funds to Ethereum suggests the attacker aimed to obfuscate the trail or prepare for further transactions.

The event highlights ongoing security challenges in DeFi infrastructure, particularly in cross-chain bridges and custody solutions. While the incident does not directly impact the Arbitrum network, it raises questions about the security measures of protocols operating within its ecosystem.

The impact on AFX's reputation and user confidence remains uncertain, but the incident emphasizes the need for enhanced security protocols in DeFi custody solutions to prevent similar exploits in the future.