Multiple cross-chain protocols were drained of more than $35 million in a series of attacks spanning six hours. The incidents targeted bridges and staking contracts on Arbitrum, Ethereum and Bitcoin scaling networks.
AFX Trade, a decentralized perpetuals exchange on Arbitrum, lost about $24.15 million after an attacker compromised validator signing keys for a bridge it operates. The stolen USDC was moved to Ethereum and swapped for roughly 12,467 ETH.
Verus’s Ethereum bridge was drained of $7.54 million in ether, tokenized Bitcoin and stablecoins. The exploit reused the same contract path as a May incident, after funds were redeposited on July 8.
B² Network lost approximately $3.86 million when an attacker seized upgrade authority over its token staking contract. The protocol said it had contained the incident and would compensate affected users.
Security firms Blockaid and PeckShield reported that none of the attacks broke underlying cryptography. Each involved either logic flaws or compromised off-chain keys.
