Arbitrum

Wednesday

USDC

[Update 7:20 am UTC, July 23: Adds comments from Blockaid CEO Ido Ben Natan starting in the eighth paragraph.]Hackers stole more than $31.6 million across two unrelated crypto bridge exploits spaced just hours apart, targeting bridges operated by decentralized perpetual exchange AFX and Verus Protocol.&nbsp;According to Blockaid, AFX, a decentralized perpetual exchange operating on Arbitrum, reportedly lost $24.15 million on Wednesday through a hack targeting one of its cross-chain bridges. Hours later, Blockaid said it detected an exploit targeting the Verus Ethereum Bridge that resulted in about $7.5 million in crypto being stolen.&nbsp;The back-to-back exploits highlight the continued security risks facing crosschain bridges, which hold large pools of assets and move funds between separate blockchains.&nbsp;“Another bridge, another exploit. Bridges will always be a weak link, until security is upgraded,”&nbsp; onchain investigator TheCrypticWolf <a href="https://x.com/TheCrypticWolf1/status/2080145550100337039?s=20" rel="noopener noreferrer nofollow">said</a> in a post on X.&nbsp;<h2 id="afx-protocol-bridge-hack">AFX protocol bridge hack&nbsp;</h2>Blockaid said Wednesday it detected an exploit at 9:30 pm UTC targeting a bridge operated by AFX. Offchain Labs co-founder Stephen Goldfeder confirmed a bridge hack had affected a third-party protocol.“We’re aware of a report of a bridge hack on Arbitrum and are investigating. We can confirm that the transaction in question originated from a third-party protocol, and the Arbitrum native bridge has not been hacked or exploited in any way,” Goldfeder<a href="https://x.com/sgoldfed/status/2080071210847674709?s=20" rel="noopener noreferrer nofollow"> said</a> in a post on X.SunSec, founder of the Web3 security community DeFiHackLabs and a contributor to SEAL, said the evidence <a href="https://x.com/1nf0s3cpt/status/2080082521778467217?s=20" rel="noopener noreferrer nofollow">suggested</a> compromised keys, rather than a smart contract logic bug, were responsible for the exploit.According to Ido Ben-Natan, co-founder and CEO of Blockaid, the company’s assessment was consistent with reports that five hot validator keys had been compromised.“This appears to have been an operational security incident rather than a smart contract vulnerability,” Ben-Natan told Cointelegraph. “The unauthorized withdrawal carried genuine validator signatures, meaning the bridge’s onchain verification behaved exactly as designed rather than being bypassed.”He added that the required validator quorum had been satisfied using authentic signatures, suggesting the compromise occurred in the bridge’s offchain signing infrastructure rather than in the bridge contract itself.Cointelegraph reached out to AFX for comment.Related: <a href="https://cointelegraph.com/news/allbridge-core-pauses-cross-chain-bridge-after-165m-exploit" rel="noopener noreferrer nofollow">Allbridge pauses cross-chain bridge after $1.65M exploit</a><h2 id="verus-ethereum-bridge-suffers-another-attack">Verus Ethereum bridge suffers another attack</h2>In a separate incident, Blockaid detected an exploit targeting the Verus Ethereum bridge, leading to $7.5 million in Ether, tBTC (a Bitcoin-backed ERC-20 token), USDC, USDt, EURC, MKR and scrvUSD drained from bridge reserves.&nbsp;Blockaid said the attack appears similar to the previous <a href="https://cointelegraph.com/news/verus-ethereum-bridge-reportedly-exploited-for-millions" rel="noopener noreferrer nofollow">Verus Ethereum Bridge incident in May</a> that drained $11.58 million, using the same attack method but a different attacker wallet.&nbsp;“An attacker used the bridge import path to trigger unbacked Ethereum-side payouts,” said Blockaid.&nbsp;Magazine: <a href="https://cointelegraph.com/magazine/how-much-longer-until-bitcoin-finds-cycle-bottom-analysts-disagree" rel="noopener noreferrer nofollow">Has Bitcoin bottomed for this cycle? Analysts say ‘not yet’</a>

Hackers steal $31.6M in 2 crypto bridge attacks within 7 hours

Table of Contents

Cointelegraph

Other articles published on Jul 23, 2026

AFX Trade on Arbitrum Exploited for $24.15 Million in USDC

How Does Pump.Fun Make Money?

A Closer Look at Avalanche's 2026 Fundamentals

XRP’s Path to Bitcoin Hinges on Adoption as Market Structure Still Favors BTC

Interlink Hits 10 Million User Milestone

1win Launches Dedicated FIFA World Cup 2026 Prediction Markets

Join our free newsletter for daily crypto updates!