An exploit targeting the AFX bridge has reportedly resulted in the loss of approximately $24.15 million in USDC, according to unconfirmed early accounts of the incident. The exact method by which the attacker gained access to the cross-chain infrastructure has not been independently verified, and the reported figures should be considered preliminary.

The loss is denominated in USDC, a dollar-pegged stablecoin designed to maintain a value of $1, which gives the drained balance a straightforward dollar-denominated valuation. USDC is the second-largest stablecoin by market capitalization, and its circulating supply and cross-chain trading activity are tracked on CoinGecko.

Because the reported figures originate from a single early source, the precise exploit mechanism, the specific blockchains affected, and the final loss total all remain unconfirmed until either the AFX project team or verifiable on-chain data provides corroboration.

Why Bridge Exploits Can Produce Large Stablecoin Losses

Cross-chain bridges hold pooled assets to facilitate token transfers between blockchains. This architecture concentrates substantial value within a single smart contract, making bridges a recurring target for attackers. Bridges have accounted for some of the largest DeFi exploits on record, including the Ronin Network incident of March 2022, in which approximately $625 million was stolen, and the Wormhole bridge exploit the previous month, which resulted in losses of roughly $325 million. When a bridge is drained, any user whose funds were locked in the contract at the time may be affected.

The pattern has surfaced in multiple recent incidents as well. Allbridge, a separate cross-chain protocol, was paused following a $1.65 million exploit on Solana. In another case, a suspected Hedera exploit was linked to funds subsequently moved onto Ethereum.

Because stablecoins carry a fixed dollar value, a loss denominated in USDC translates immediately into a clear headline dollar figure. This tends to intensify concerns around liquidity and user trust to a greater degree than a comparable loss in a volatile token. The recurring nature of bridge exploits has contributed to industry-wide calls for stronger multi-signature controls, formal security audits, and bug bounty programs for cross-chain infrastructure. Stablecoin supply and chain distribution data can be tracked via DeFiLlama's stablecoin dashboards.

What Comes Next

A loss of this magnitude typically directs scrutiny toward the affected project's response — specifically whether the team pauses the bridge, releases an incident report, and communicates transparently with users. No official statement from AFX has been confirmed in the available evidence.

Users will be seeking clarity on several key questions: whether withdrawals are currently affected, how much exposure remains in the contract, and whether any reimbursement plan is being prepared. Responses to similar incidents have varied. Gnosis Pay, for instance, refunded users after a $1.8 million exploit. In contrast, a recent Ethereum DeFi exploit left affected participants with limited recourse, illustrating that outcomes differ widely across projects.

Further details — including the confirmed loss amount and the specific attack vector — may be revised as investigators and the AFX team publish verified information.