Around $24.15 million in USDC left AFX's cross-chain bridge on Arbitrum in what is being reported as a targeted exploit. The funds appear in a single transaction flagged on Arbiscan: 0x359f8c05b86a4409d60cfba02084334313fd94b19f74a294fb7fc4ea7d4870e0. That on-chain record is the closest thing to hard evidence available right now, with no full incident report yet published by AFX or any security partner.

What the Evidence Actually Shows

The incident surfaced through an X post and the Arbiscan entry above. Neither source, on its own, confirms how the bridge was breached. The exploit path is still unknown: whether custody logic failed, permissions were misconfigured, or something else entirely went wrong has not been established. The Arbiscan record shows the chain named is Arbitrum and the asset named is USDC, but decoded transfer details have not been extracted into any verified public statement as of this writing.

The $24.15 million figure comes from the circulating social reference, not from a protocol post-mortem. That means the total loss could be revised once AFX or an independent security firm publishes a readable breakdown. Until then, the number should be treated as reported, not confirmed.

Why the Ambiguity Matters for Users

Bridge exploits on layer-2 networks like Arbitrum tend to raise an immediate question: is this a protocol-specific failure or does it point to something broader on the chain? Current sourcing does not answer that. Arbitrum itself has not issued any statement, and the cited transaction does not, by itself, prove the scope or route of the outflow.

Users who hold funds in AFX's bridge or interact with its contracts should treat activity there as suspended until the team communicates directly. A $24 million USDC drain in a single transaction is not a minor anomaly. Security incidents of comparable scale, such as those tracked across DeFi throughout 2024 and 2025, have routinely involved a window of hours between the on-chain event and any official acknowledgment from the affected protocol.

This story will require updates as AFX responds or as blockchain security firms decode the transaction in full.

This article is for informational purposes only and does not constitute financial or investment advice.