# Hackers Steal Over $24M in Attack on DeFi Protocol AFX on Arbitrum

Major security breach hits AFX protocol with significant financial losses.

- **Source:** [INCRYPTED](https://brifing.si/source/7cd4625d-3f08-4cc1-983d-4c7d991839ba)
- **Published:** 2026-07-23
- **Topic:** [Finance](https://brifing.si/c/finance)
- **Original article:** <https://incrypted.com/hakery-pohytyly-bolee-24-mln-vo-vremja-ataky-na-defi-protokol/>
- **On Brifing:** https://brifing.si/s/393df724-b2f6-4346-a02c-1436383ded23

## Attack Scale

The DeFi protocol AFX operating on the Arbitrum network suffered a cyber attack on July 22, 2026. Attackers successfully stole approximately $24.15 million worth of USDC from the protocol. The stolen funds were later transferred to the Ethereum network and converted into 12,467 ETH.

## Attack Source

Security experts from Blockaid identified that the attack originated from a vulnerability in a bridge protocol operated by AFX. The Arbitrum team confirmed their core infrastructure wasn't compromised but are investigating the incident. Experts believe the attack resulted from validator mechanism compromise rather than a smart contract flaw.

## AFX's Response

The AFX team announced they're investigating the attack and confirmed the stolen funds remain in the attacker's address. They're collaborating with security firms like Crypto Defense Alliance and Zellic to trace the funds. AFX also made a 'white hat hacker' offer, proposing to let the attacker keep 30% of funds if 70% is returned.

## Other Sector Attacks

This incident marks the latest major security breach in DeFi. Just in July 2026, Summer.fi lost $6 million, Bonzo Lend $9 million, and Ostium $24 million to various exploits. The Allbridge Core bridge was also attacked, while the Balance Coin algorithmic stablecoin collapsed after a related protocol hack.

## Security Concerns

The attack has reignited concerns about security vulnerabilities in DeFi protocols. Experts emphasize that audits don't guarantee absolute security. Validator mechanism flaws and oracle manipulations remain among the sector's biggest security risks, requiring more robust solutions.

## Sector Impact

Such attacks may shake confidence in DeFi ecosystems, potentially affecting user adoption of decentralized finance systems. Protocols need to enhance security measures and develop more proactive solutions to protect user assets. The incident could also intensify regulatory discussions in the sector.

## Sources covering this story

- https://incrypted.com/hakery-pohytyly-bolee-24-mln-vo-vremja-ataky-na-defi-protokol/ — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
