Woofun AI reports that a $24.15 million USDC drain occurred within the AFX Trade protocol on Arbitrum, an incident first documented by The Block. This security breach highlights a critical vulnerability in the decentralized finance application layer rather than the underlying network infrastructure.

The financial impact centers on the theft of approximately $24.15 million in USD Coin (USDC). These stablecoins were extracted from the protocol’s reserves, representing a direct loss to the platform’s liquidity pools and users who had deposited assets into the system.

Structurally, the Arbitrum team confirmed that the network’s native bridge remained uncompromised throughout the event. The attacker exploited a specific vulnerability within AFX Trade’s smart contracts, isolating the breach to the protocol itself and ensuring that the broader Arbitrum infrastructure and other protocols on the network were not directly affected.

Per Woofun AI, this incident aligns with a rising trend of high-profile attacks targeting DeFi protocols in 2025 and 2026. Malicious actors continue to probe for weaknesses in smart contract code, oracle manipulations, and flash loan attacks, keeping the total value locked (TVL) in DeFi under constant threat.

The immediate consequences are borne by AFX Trade’s liquidity providers and users, who face significant financial losses. To mitigate future risks, the industry must prioritize rigorous smart contract audits, robust bug bounty programs, and real-time monitoring systems. This marks another stark reminder of the persistent security challenges facing the decentralized finance ecosystem.