blockaid

⚠️ Three exploits, in one day, $35.55M lost: DeFi had its “black Tuesday” in 24 hours

Yesterday wasn’t a bad day for a protocol. It was a bad day for the entire sector.

AFX Trade: $24.15M for a key, not for a bug
The AFX bridge contract on $ARB did exactly what it was supposed to do: it verified valid signatures and released the funds. The problem is that those signatures came from compromised validator keys. In 200 seconds, the attacker moved the money to Ethereum and converted it into more than 12,400 ETH. Arbitrum as a network had nothing to do with it—it was isolated by AFX’s own bridge.
Verus: the same wound, twice

The Verus–Ethereum bridge lost $7.54M by exploiting the same route and the same type of failure that had already hit it in May. Repeating the same bug twice in a year says something uncomfortable: patching the symptom isn’t the same as fixing the cause.

B² Network: when the “admin” is the attack vector
Here there wasn’t even a hacked bridge. Someone took control of the staking contract’s administrative permission, and from there sold the stolen tokens. No broken cryptography—just poorly secured permission management.

This is a direct continuation of what we saw with Ostium a week ago. Three weeks in a row—three different ways of saying the same thing: the code of smart contracts is no longer the weak link in DeFi. Private keys and administrative permissions are, and this problem isn’t solved with a Solidity audit.

Do you trust a protocol with its own bridge more, or one that uses an established bridge? 👇

#DeFiSecurity #Arbitrum #CrossChainBridges #Blockaid

🚨 Verus Ethereum Bridge Hacked — $11.58 Million Drained!
Security firm Blockaid flagged an active, ongoing exploit targeting the Verus-Ethereum Bridge in real time — and by the time the alert went out, $11.58 million had already been drained.
🔍 What Happened?
The Verus-Ethereum Bridge is a cross-chain infrastructure connecting the Verus blockchain to Ethereum's ecosystem. The attacker exploited a weakness in the bridge's escrow contract validation logic to drain user funds — a pattern that has become all too familiar in 2026.
📊 2026 DeFi Security — By the Numbers:
• $750M+ lost through mid-April alone
• KelpDAO exploit: $292M
• Drift Protocol hack: $285M
• April 2026: Worst month ever — $625M across 28 incidents
• Now Verus Bridge: $11.58M+
⚠️ If You Used the Verus-Ethereum Bridge:
✅ Do NOT initiate any new transactions through the bridge
✅ Go to Revoke.cash and revoke any bridge-related approvals
✅ Monitor official Verus and Blockaid accounts for updates
🔐 Expert Insight:
The common thread across 2026's biggest exploits? Hackers aren't breaking blockchains — they're breaking the trust layer between them. Until bridges adopt redundant verification, multi-sig controls, and real-time circuit breakers as standard practice, incidents like this will keep happening.
Stay safe. Stay informed. DYOR. 🙏
#Crypto #DeFi #Verus #BridgeHack #Blockaid #Web3Security #BinanceSquareFamily