• Home
• DeFi Exploits Reach $35.55M as Bridge Attacks Resurface

DeFi Exploits Reach $35.55M as Bridge Attacks Resurface

DeFi Exploits Total $35.55 Million in One Day – Renewed Bridge Attacks and Drift Fund Movements Raise Security Focus

Key Takeaways

• Three DeFi exploits resulted in combined losses of $35.55 million within a single day.
• AFX lost $24.2 million in USDC from its Arbitrum bridge, with funds moved to Ethereum.
• BSquared Network and VerusCoin lost $3.9 million and $7.5 million respectively in separate bridge exploits.
• The attacker behind the earlier $285 million Drift Protocol exploit has resumed moving stolen ETH through Tornado Cash Router.
• DeFi total value locked had risen by more than $10 billion in July before the latest incidents.

Three Cross-Chain Bridge Exploits Drive $35.55 Million in Losses

Three decentralized finance protocols were targeted in a single day, leading to cumulative losses of $35.55 million. Each incident involved cross-chain bridge infrastructure, placing renewed attention on one of the most frequently targeted components of the DeFi ecosystem.

AFX recorded the largest loss. Attackers stole $24.2 million in USDC from its Arbitrum bridge and transferred the funds to Ethereum. BSquared Network reported the second-largest loss, with approximately $3.9 million drained after an attacker removed 8.6 million B2 tokens. VerusCoin also suffered a bridge exploit, losing roughly $7.5 million.

Although the affected protocols operate across different ecosystems, the method of attack was identical in each case. All three incidents targeted cross-chain bridges, which facilitate the transfer of assets between blockchains. The concentration of attacks on bridge infrastructure highlights a recurring technical vulnerability within the DeFi stack.

While the total losses are smaller than earlier major exploits this year, the clustering of three incidents in a single day has drawn market attention. According to the source material, market participants have described it as the worst day for DeFi in months.

Bridge Infrastructure Remains a Repeated Attack Vector

The common element across the AFX, BSquared Network, and VerusCoin incidents is the use of bridge exploits. Cross-chain bridges are designed to enable asset transfers between separate blockchain networks. In each of the three cases, attackers exploited bridge-related mechanisms rather than other parts of the protocols.

This pattern mirrors earlier periods in which bridge vulnerabilities played a central role in large-scale losses. In the previous Q1-Q2 cycle referenced in the source material, three back-to-back hacks erased more than $600 million. That earlier wave of incidents triggered a sharp liquidity outflow from DeFi.

At that time, total value locked across DeFi protocols dropped to just over $65 billion, returning to Q2 2024 levels. Ethereum alone lost more than $10 billion in TVL within less than 48 hours. The renewed focus on bridge security comes against that historical backdrop of liquidity sensitivity following exploit events.

Drift Exploit Funds Move Again Through Tornado Cash Router

The latest bridge attacks coincided with renewed activity linked to the earlier Drift Protocol exploit. Earlier this year, Drift Protocol experienced a $285 million exploit, described in the source material as one of the largest DeFi incidents of the year. That event contributed to a broader risk-off shift across the sector.

According to Onchain Lens, the attacker behind the Drift exploit has begun moving stolen funds again. The ETH is reportedly being funneled through the Tornado Cash Router in repeated batches of 100 ETH, with multiple transactions executed every minute.

The transfers do not necessarily indicate immediate selling activity. However, the renewed movement of funds has brought the Drift case back into focus at the same time that three new bridge exploits occurred. The overlap in timing has increased attention on protocol-level security across the sector.

DeFi TVL Had Recovered by Over $10 Billion in July

Before the latest incidents, DeFi metrics had shown signs of recovery. According to DeFiLlama data cited in the source material, total value locked increased by more than $10 billion in July. This marked the strongest monthly increase since the earlier Q1-Q2 hack wave.

That rebound followed a period of contraction driven by the earlier series of exploits totaling more than $600 million. The previous wave resulted in substantial liquidity withdrawals and sharp reductions in protocol TVL.

The new $35.55 million in losses comes at a moment when DeFi had been regaining capital inflows. The combination of fresh bridge exploits and renewed fund movements from the Drift attacker introduces additional security considerations at a time of improving TVL metrics.

For users of DeFi services, including those interacting with protocols connected to broader crypto ecosystems such as exchanges or gaming-related applications, bridge security remains a structural factor. Cross-chain functionality is widely used to move assets between networks, and exploit events can affect liquidity conditions and risk perception.

Our Assessment

Three separate bridge exploits resulted in $35.55 million in losses in one day, affecting AFX, BSquared Network, and VerusCoin. At the same time, the attacker responsible for the earlier $285 million Drift Protocol exploit resumed transferring stolen ETH through Tornado Cash Router. These developments occurred after DeFi total value locked had increased by more than $10 billion in July, following a previous period in which over $600 million in hacks led to significant liquidity outflows and a drop in TVL to just over $65 billion. The latest incidents place renewed attention on cross-chain bridge security within the DeFi ecosystem.