Blockaid

AFX Trade, a decentralized perpetuals exchange on Arbitrum, was drained of about 24.15 million USDC after attacker-controlled validator signatures authorized a bridge withdrawal. Arbitrum’s native bridge was not breached, with security findings pointing to a third-party protocol failure involving off-chain hot-validator keys.

Ostium was hit by an $18 million USDC exploit after an attacker used a registered component of its own price-feed automation system to submit manipulated future-dated oracle reports. The incident adds to a growing run of oracle and keeper-related attacks across DeFi infrastructure.