AFX to Unveil Goodwill Plan on Aug. 3 After $24.15M Exploit

AFX to Unveil Goodwill Plan on Aug. 3 Following $24.15M Exploit

Affected users of AFX, a decentralized derivatives protocol, will soon learn about a proposed goodwill plan set to be announced on August 3. This decision comes after a significant security breach on July 22, where approximately $24.15 million in USDC was stolen from the protocol’s custody bridge.

Details of the Security Incident

According to AFX, the exploitable event stemmed from a social engineering attack aimed at one of its developers. The attacker, posing as a recruiter, deceived the developer into cloning a fraudulent software repository that included a malicious configuration. This led to a compromise of the developer’s workstation and subsequently the operational infrastructure.

AFX emphasized that the exploit specifically targeted their custody bridge and did not compromise the Arbitrum native bridge, a point validated by ongoing investigations by blockchain security firm Blockaid and Arbitrum.

Investigation Findings and Recovery Efforts

Following the incident, AFX has taken immediate action to enhance security. They have rebuilt key infrastructure and introduced additional measures to prevent future incidents. The technical investigation found that existing trust relationships were exploited, allowing the attacker to execute a bridge transaction that resulted in the theft of 24.15 million USDC.

AFX has deployed countermeasures which include rotating operational credentials and improving their monitoring systems. Future plans of the protocol involve stronger behavioral monitoring and training for employees to counter social engineering tactics.

Looking Ahead

In a community update, AFX asked affected users and stakeholders for patience as they finalize the compensation structure. The forthcoming announcement on August 3 will provide clarity on how they intend to manage the aftermath of the incident, which has significantly impacted investors and early supporters of the protocol.

As the investigation continues, AFX remains focused on collaborating with external security partners to trace the stolen assets and enhance the overall security framework of their operations.