AFX to Announce Goodwill Plan Today After $24.15M Bridge Hack
Decentralized derivatives protocol AFX will announce its goodwill plan today for users affected by last week's $24.15 million bridge exploit. A detailed post-mortem revealed the attack began with a social engineering campaign against a developer — an attacker posing as a recruiter convinced the developer to clone a malicious repository containing hidden payload code. The attacker gradually expanded access, uploaded a malicious Groovy plugin, and ultimately compromised the bridge's validator infrastructure. AFX confirmed the exploit targeted its own custody bridge, not Arbitrum's native bridge.
Risk reminder: Social engineering remains a critical threat vector. Even protocols with audited smart contracts can be compromised through developer infrastructure.
