Ethereum bridge hacks total $31.7M as AFX exploit and Verus withdrawals plus B² staking halt
Two Ethereum bridge incidents hit within hours, driving about $31.69M in losses. Blockaid detected the AFX attack on July 22 (~21:30 UTC). An Arbitrum transaction showed 24.15M USDC leaving the AFX-operated Ethereum bridge after alleged social engineering spread from a development environment into build and validator systems. AFX said the incident was isolated from its trading infrastructure and denied network-wide compromise; recovery and remediation were still in progress as of July 24.
Hours later, the Verus-Ethereum bridge released unbacked assets. Blockaid valued the payouts at about $7.54M after SlowMist found eight withdrawals were approved without proof that matching reserves backed them. SlowMist linked the failure to the same broad cross-chain import-validation class as a prior May exploit, though it noted different mechanics.
Separately, B² Network halted staking after unauthorized access to its staking-contract upgrade authority. B² said the issue was contained and offered manual exits via verified requests on its Discord during security reviews, while compensation status had not been finalized as of July 24. The article excludes B²’s loss amount from the $31.69M figure.
For traders, these Ethereum bridge failures raise near-term risk around liquidity, withdrawal timing, and counterparty/bridge accounting integrity, and they can keep stablecoin and bridge-linked DeFi sentiment pressured until clear fund-recovery updates emerge.
Bearish
This is broadly bearish for trading sentiment because it confirms multiple, distinct control failures across Ethereum bridge operations—custody/validator compromise (AFX), bridge accounting/reserve validation failure (Verus), and staking upgrade-authority exposure (B²). In the short term, such events typically trigger faster risk-off behavior: liquidity can thin out, users rush to exit, and stablecoin-bridge routes may experience execution delays or temporary de-pegging fears. Historically, after high-profile bridge exploit headlines (e.g., past multi-million-dollar cross-chain failures), markets often see short-term volatility and underperformance in affected DeFi niches until clear remediation and fund-return timelines appear.
For the longer term, the market may reprice bridge risk premiums—traders often shift toward platforms with stronger reserve proofs, safer upgrade processes, and audited operational controls. Even though this specific article doesn’t provide an explicit B² loss figure, the need for manual exits highlights operational friction that can worsen during network congestion or heightened monitoring. Net effect: heightened perceived smart-contract and operational risk near-term, with potential sustained pressure on bridge-linked volumes until recovery reports reduce uncertainty.