{"id":11116,"date":"2026-07-25T10:01:09","date_gmt":"2026-07-25T10:01:09","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=11116"},"modified":"2026-07-25T10:01:09","modified_gmt":"2026-07-25T10:01:09","slug":"two-ethereum-bridges-lose-31-7m-within-hours-as-third-protocol-halts-staking","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=11116","title":{"rendered":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking"},"content":{"rendered":"<p><\/p>\n<div>\n<p>AFX and the Verus-Ethereum bridge suffered about $31.69 million in combined losses within hours of each other, while B\u00b2 Network separately suspended token staking after unauthorized access to a contract upgrade authority.<\/p>\n<p>Blockaid said it detected the AFX exploit at about 21:30 UTC on July 22. An Arbitrum transaction recorded 24.15 million USDC leaving the bridge operated by AFX, a decentralized trading protocol on Arbitrum.<\/p>\n<p>AFX suspended its USDC custody bridge and said the incident was isolated from its trading infrastructure, mainnet, and the Arbitrum network. The affected component was a third-party bridge, not Arbitrum&#8217;s native bridge.<\/p>\n<p>In preliminary findings published July 24, AFX attributed the incident to coordinated social engineering and infrastructure compromise. The protocol said access appeared to begin in a development environment before escalating into internal build infrastructure and validator systems.<\/p>\n<div class=\"cs-article-embed\">\n<div class=\"cs-article-embed__media\"> <img loading=\"lazy\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/defi-exploit-update-1024x576.jpg\" alt=\"The next big DeFi exploit will start before the code is deployed\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/defi-exploit-update-1024x576.jpg\" alt=\"The next big DeFi exploit will start before the code is deployed\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">The next big DeFi exploit will start before the code is deployed<\/h3>\n<p>A new malware campaign targeting crypto developers shows how attackers can move upstream, stealing GitHub tokens, SSH keys, cloud credentials, wallets, and environment variables before a protocol ever ships vulnerable code.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">May 26, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Gino Matos<\/span><\/p>\n<\/div><\/div>\n<p>AFX said it was verifying balances, pursuing fund recovery and preparing remediation. As of July 24, it had not announced a completed return of funds or a finalized compensation plan.<\/p>\n<p>Hours after the AFX incident, an Ethereum transaction showed the Verus bridge releasing 1,137.4528 ETH and seven token transfers. Blockaid valued the unbacked payouts at about $7.54 million.<\/p>\n<p>SlowMist&#8217;s analysis said the bridge approved eight withdrawals without proving that matching assets backed them. The firm linked the failure to the same broad cross-chain import-validation class as a May exploit, but said the two attacks used different mechanics.<\/p>\n<div id=\"cs-inline-newsletter-6a64861eda4b7\" class=\"cs-inline-newsletter\" data-inline-newsletter=\"\">\n<div class=\"cs-inline-newsletter__inner\">\n<div class=\"cs-inline-newsletter__content\"> <span class=\"cs-inline-newsletter__eyebrow\">CryptoSlate Daily Brief<\/span><\/p>\n<h3 class=\"cs-inline-newsletter__title\">Daily signals, zero noise.<\/h3>\n<p class=\"cs-inline-newsletter__copy\">Market-moving headlines and context delivered every morning in one tight read.<\/p>\n<p> <span><i class=\"fa-regular fa-bolt\" aria-hidden=\"true\"\/> 5-minute digest<\/span> <span><i class=\"fa-regular fa-star\" aria-hidden=\"true\"\/> 100k+ readers<\/span><\/p>\n<\/div>\n<div class=\"cs-inline-newsletter__form-shell\">\n<p class=\"cs-inline-newsletter__privacy\">Free. No spam. Unsubscribe any time.<\/p>\n<p> <i class=\"fa-regular fa-circle-xmark\" aria-hidden=\"true\"\/> <span>Whoops, looks like there was a problem. Please try again.<\/span><\/p>\n<p> <i class=\"fa-regular fa-circle-check\" aria-hidden=\"true\"\/> <span>You\u2019re subscribed. Welcome aboard.<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"cs-article-embed\">\n<div class=\"cs-article-embed__media\"> <img loading=\"lazy\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/taiko-bridge-1024x576.jpg\" alt=\"Crypto users told to pull funds after Ethereum L2 bridge failure exposes rollup exit risk\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/taiko-bridge-1024x576.jpg\" alt=\"Crypto users told to pull funds after Ethereum L2 bridge failure exposes rollup exit risk\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">Crypto users told to pull funds after Ethereum L2 bridge failure exposes rollup exit risk<\/h3>\n<p>The incident forced users to confront the part of rollup security that usually stays invisible: whether they can still withdraw when the bridge layer breaks.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">Jun 23, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Liam &#8216;Akiba&#8217; Wright<\/span><\/p>\n<\/div><\/div>\n<p>B\u00b2&#8217;s incident was not disclosed as a bridge exploit. The network said there was unauthorized access to its staking contract&#8217;s upgrade authority. B\u00b2 suspended normal staking during security reviews, said the issue was contained, and promised full compensation to affected users. It had not documented completed restitution as of July 24.<\/p>\n<p>B\u00b2 also offered a manual exit: users could request unstaking through its official Discord, with ownership-verified requests to be processed within one business day. The network did not state a loss amount, so its incident is excluded from the $31.69 million bridge-loss total. Until normal staking resumes, that manual review is the route B\u00b2 offered users seeking to withdraw staked tokens.<\/p>\n<div class=\"cs-article-embed\">\n<div class=\"cs-article-embed__media\"> <img loading=\"lazy\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/defi-automated-yield-risk-1024x576.jpg\" alt=\"DeFi\u2019s automated yield protocols were built for retail, now they just add another layer of risk\" loading=\"lazy\" decoding=\"async\"\/><img loading=\"lazy\" class=\"lazyload\" width=\"1024\" height=\"576\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/defi-automated-yield-risk-1024x576.jpg\" alt=\"DeFi\u2019s automated yield protocols were built for retail, now they just add another layer of risk\" loading=\"lazy\" decoding=\"async\"\/><\/div>\n<div class=\"cs-article-embed__body\"> <span class=\"cs-article-embed__related-reading\">Related Reading<\/span><\/p>\n<h3 class=\"cs-article-embed__title\">DeFi\u2019s automated yield protocols were built for retail, now they just add another layer of risk<\/h3>\n<p>Stake DAO\u2019s vsdCRV exploit shows how automated yield products can turn DeFi complexity into a black box for retail users.<\/p>\n<p> <span class=\"cs-article-embed__meta-item\">May 28, 2026<\/span> <span class=\"cs-article-embed__meta-divider\">\u00b7<\/span> <span class=\"cs-article-embed__meta-item\">Gino Matos<\/span><\/p>\n<\/div><\/div>\n<p>The three episodes exposed different controls outside base-chain consensus. AFX&#8217;s custody and validator infrastructure, Verus&#8217;s bridge-accounting checks, and B\u00b2&#8217;s staking-contract upgrade authority each became the point where normal access failed.<\/p>\n<p>For users, the next test is whether recovery plans return funds, whether cross-chain validation verifies economic backing and whether upgrade authority is protected without making emergency exits depend on manual intervention.<\/p>\n<\/div>\n<p>Crime,DeFi,Featured,Outage,Scams,Wallets,BlockAid,ethereum,SlowMist,stablecoins,USDCBlockAid,ethereum,SlowMist,stablecoins,USDC#Ethereum #bridges #lose #31.7M #hours #protocol #halts #staking1784973669<\/p>\n","protected":false},"excerpt":{"rendered":"<p>AFX and the Verus-Ethereum bridge suffered about $31.69 million in combined losses within hours of each other, while B\u00b2 Network separately suspended token staking after unauthorized access to a contract upgrade authority. Blockaid said it detected the AFX exploit at about 21:30 UTC on July 22. An Arbitrum transaction recorded 24.15 million USDC leaving the<\/p>\n","protected":false},"author":1,"featured_media":11117,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[5683,4876,2993,31,1276,877,1929,131,5682,282,168,1582],"class_list":["post-11116","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ethereum","tag-31-7m","tag-blockaid","tag-bridges","tag-ethereum","tag-halts","tag-hours","tag-lose","tag-protocol","tag-slowmist","tag-stablecoins","tag-staking","tag-usdc"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.6 (Yoast SEO v26.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Two Ethereum bridges lose $31.7M within hours as third protocol halts staking - Crypto News: Latest Cryptocurrency News and Analysis<\/title>\n<meta name=\"description\" content=\"Bridge breach losses hit $31.69M across AFX and Verus, while B\u00b2 halted staking after unauthorized access to its upgrade authority.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.uk.com\/?p=11116\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking\" \/>\n<meta property=\"og:description\" content=\"Bridge breach losses hit $31.69M across AFX and Verus, while B\u00b2 halted staking after unauthorized access to its upgrade authority.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.uk.com\/?p=11116\" \/>\n<meta property=\"og:site_name\" content=\"Crypto News: Latest Cryptocurrency News and Analysis\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-25T10:01:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1371\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"\u884c\u653f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u884c\u653f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11116\",\"url\":\"https:\/\/cryptonews.uk.com\/?p=11116\",\"name\":\"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking - Crypto News: Latest Cryptocurrency News and Analysis\",\"isPartOf\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11116#primaryimage\"},\"image\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11116#primaryimage\"},\"thumbnailUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg\",\"datePublished\":\"2026-07-25T10:01:09+00:00\",\"author\":{\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\"},\"description\":\"Bridge breach losses hit $31.69M across AFX and Verus, while B\u00b2 halted staking after unauthorized access to its upgrade authority.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11116#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptonews.uk.com\/?p=11116\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11116#primaryimage\",\"url\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg\",\"contentUrl\":\"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg\",\"width\":1371,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptonews.uk.com\/?p=11116#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptonews.uk.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptonews.uk.com\/#website\",\"url\":\"https:\/\/cryptonews.uk.com\/\",\"name\":\"Crypto News: Latest Cryptocurrency News and Analysis\",\"description\":\"Latest Crypto &amp; Bitcoin News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptonews.uk.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf\",\"name\":\"\u884c\u653f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g\",\"caption\":\"\u884c\u653f\"},\"sameAs\":[\"http:\/\/demo3.aiwalls.com\/coinbase\"],\"url\":\"https:\/\/cryptonews.uk.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking - Crypto News: Latest Cryptocurrency News and Analysis","description":"Bridge breach losses hit $31.69M across AFX and Verus, while B\u00b2 halted staking after unauthorized access to its upgrade authority.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.uk.com\/?p=11116","og_locale":"en_US","og_type":"article","og_title":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking","og_description":"Bridge breach losses hit $31.69M across AFX and Verus, while B\u00b2 halted staking after unauthorized access to its upgrade authority.","og_url":"https:\/\/cryptonews.uk.com\/?p=11116","og_site_name":"Crypto News: Latest Cryptocurrency News and Analysis","article_published_time":"2026-07-25T10:01:09+00:00","og_image":[{"width":1371,"height":720,"url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg","type":"image\/jpeg"}],"author":"\u884c\u653f","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u884c\u653f","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/cryptonews.uk.com\/?p=11116","url":"https:\/\/cryptonews.uk.com\/?p=11116","name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking - Crypto News: Latest Cryptocurrency News and Analysis","isPartOf":{"@id":"https:\/\/cryptonews.uk.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.uk.com\/?p=11116#primaryimage"},"image":{"@id":"https:\/\/cryptonews.uk.com\/?p=11116#primaryimage"},"thumbnailUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg","datePublished":"2026-07-25T10:01:09+00:00","author":{"@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf"},"description":"Bridge breach losses hit $31.69M across AFX and Verus, while B\u00b2 halted staking after unauthorized access to its upgrade authority.","breadcrumb":{"@id":"https:\/\/cryptonews.uk.com\/?p=11116#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.uk.com\/?p=11116"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/?p=11116#primaryimage","url":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg","contentUrl":"https:\/\/cryptonews.uk.com\/wp-content\/uploads\/2026\/07\/afx-verus-control-gate-featured.jpg","width":1371,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.uk.com\/?p=11116#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.uk.com\/"},{"@type":"ListItem","position":2,"name":"Two Ethereum bridges lose $31.7M within hours as third protocol halts staking"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.uk.com\/#website","url":"https:\/\/cryptonews.uk.com\/","name":"Crypto News: Latest Cryptocurrency News and Analysis","description":"Latest Crypto &amp; Bitcoin News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.uk.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/822778c5844e0d16d43dce6630f4f1bf","name":"\u884c\u653f","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptonews.uk.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e4c2d23409b09e004cef3facbe677e95c5401f9e29680f3a311e0130c5748089?s=96&d=mm&r=g","caption":"\u884c\u653f"},"sameAs":["http:\/\/demo3.aiwalls.com\/coinbase"],"url":"https:\/\/cryptonews.uk.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11116"}],"version-history":[{"count":0,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/posts\/11116\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=\/wp\/v2\/media\/11117"}],"wp:attachment":[{"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.uk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}