Hackers Steal Over $24M in Attack on DeFi Protocol AFX on Arbitrum
Major security breach hits AFX protocol with significant financial losses.
1Attack Scale
The DeFi protocol AFX operating on the Arbitrum network suffered a cyber attack on July 22, 2026. Attackers successfully stole approximately $24.15 million worth of USDC from the protocol. The stolen funds were later transferred to the Ethereum network and converted into 12,467 ETH.
2Attack Source
Security experts from Blockaid identified that the attack originated from a vulnerability in a bridge protocol operated by AFX. The Arbitrum team confirmed their core infrastructure wasn't compromised but are investigating the incident. Experts believe the attack resulted from validator mechanism compromise rather than a smart contract flaw.
3AFX's Response
The AFX team announced they're investigating the attack and confirmed the stolen funds remain in the attacker's address. They're collaborating with security firms like Crypto Defense Alliance and Zellic to trace the funds. AFX also made a 'white hat hacker' offer, proposing to let the attacker keep 30% of funds if 70% is returned.
4Other Sector Attacks
This incident marks the latest major security breach in DeFi. Just in July 2026, Summer.fi lost $6 million, Bonzo Lend $9 million, and Ostium $24 million to various exploits. The Allbridge Core bridge was also attacked, while the Balance Coin algorithmic stablecoin collapsed after a related protocol hack.
5Security Concerns
The attack has reignited concerns about security vulnerabilities in DeFi protocols. Experts emphasize that audits don't guarantee absolute security. Validator mechanism flaws and oracle manipulations remain among the sector's biggest security risks, requiring more robust solutions.
6Sector Impact
Such attacks may shake confidence in DeFi ecosystems, potentially affecting user adoption of decentralized finance systems. Protocols need to enhance security measures and develop more proactive solutions to protect user assets. The incident could also intensify regulatory discussions in the sector.
Original article: INCRYPTED — DeFi Protokolü AFX'ten 24 Milyon Dolarlık Hack