🚨 Three bridge attacks drain $35.6M+
(Attackers' main wallets now empty)
Multiple crypto protocols suffered security incidents, resulting in over $35.6M in losses across AFX, BSquared, and VerusCoin.
1. AFX bridge (~$24.2M) $USDC
The
@AFX_XYZ bridge on Arbitrum was drained for 24.2M $USDC, with funds moved to Ethereum.
The withdrawal was processed using 5 signatures from a 7-validator set, indicating a possible validator key or backend compromise.
Attacker:
0x2f2974fAbc54dbA33442261211c06BD20E0FEefc
2. BSquared (~$3.9M)
@BSquaredNetwork lost 8.6M $B2 (~$3.9M) after an attacker drained the funds.
The attacker swapped the stolen $B2 for 5,409 $BNB (~$3.0M), bridged funds to Ethereum, converted them into $ETH and $USDT, and routed them through NEAR Intents and HOT Protocol.
Attacker:
0xEc443f7D79835B464FBEAC798d3f92B62d6Ff433
3. VerusCoin bridge (~$7.5M)
The
@VerusCoin Ethereum bridge was drained for ~$7.5M.
The attacker converted the funds into 3,916 $ETH (~$7.5M) and deposited them into Tornado Cash.
Attacker:
0xCFd0A20703cD11E0b9f665e1C3F1Ef989C142D54
Data
@arkham