Three crypto protocols — AFX Trade, BSquaredNetwork, and Verus — were hit by separate exploits within 24 hours, draining a combined $35.56 million. The attacks, which targeted bridges and token contracts on Arbitrum, BNB Chain, and Ethereum, mark one of the most concentrated loss events this year.
AFX Trade's $24M bridge break
The biggest single loss hit AFX Trade, a cross-chain bridge on Arbitrum. An attacker made off with about $24.15 million in USDC, then bridged the funds to Ethereum and swapped them for 12,467.5 ETH. Arbitrum contributor Steven Goldfeder was quick to clarify that the compromised bridge was operated independently by AFX, not an Arbitrum native bridge. Security expert Taylor Monahan criticized AFX's bridge security, pointing to an audit that had almost no test coverage, several acknowledged but unfixed issues, and incomplete code review. The timing isn't great for a protocol that's supposed to move money safely between chains.
BSquaredNetwork loses $3.86M on BSC
BSquaredNetwork lost roughly $3.86 million in B2 tokens on BNB Chain. The hackers swapped the stolen tokens for over 5,000 WBNB, then converted to 1,128 ETH and bridged the haul out via NEAR Intents. The B2 token price dropped more than 15% after the exploit, a brutal reaction from a market that's seen this playbook before.
Verus exploit reuses old bug
Verus protocol lost $7.55 million in an exploit on Ethereum. The attack is related to a previous $11.58 million exploit two months earlier — same bridge contract, same entry path, same bug class. That raises an uncomfortable question: why was the same vulnerability still live? The protocol hasn't publicly explained whether the earlier fix was incomplete or never deployed.
All three incidents remain under investigation. No arrests or fund freezes have been reported. The B2 token is still trading well below its pre-exploit price.
