AFX Trade, a decentralized perpetuals exchange on Arbitrum, was drained of about 24.15 million USDC after attacker-controlled validator signatures authorized a bridge withdrawal. Arbitrum’s native bridge was not breached, with security findings pointing to a third-party protocol failure involving off-chain hot-validator keys.
