AFX is set to reveal a goodwill plan on August 3 for users hit by last week's $24.15 million exploit of its custody bridge. The attack traced back to a social engineering scheme targeting an internal developer, allowing the hacker to breach AFX's infrastructure rather than any vulnerabilities in Arbitrum’s native systems.
The protocol confirmed that only its own bridge was compromised, leaving Arbitrum’s native bridge untouched. After the exploit on July 22, which drained over 24 million USDC, AFX has rebuilt critical infrastructure and strengthened security measures. The team is finalizing a compensation strategy and urged the community including investors and early backers affected to stay patient until the full details are shared.
Security firms, including Blockaid, along with the Arbitrum team, investigated the incident, while Offchain Labs co-founder Steven Goldfeder pointed out that suspicious transactions came from a third-party protocol, not the core Arbitrum bridge. AFX’s post-mortem report revealed the breach started when an attacker masqueraded as a recruiter from Oddium Lab, manipulating a developer into cloning a malicious link.
This incident highlights ongoing risks in decentralized protocols where human factors can open doors to large-scale hacks. With the recovery plan pending, AFX’s immediate focus remains on rebuilding trust and securing user assets.
This material is for informational purposes only and does not constitute financial advice.
