An attacker extracted 24.15 million USDC from Arbitrum-based platform AFX Trade by using hot-validator signatures to authorize a massive withdrawal, according to the original report. Security firms traced the exploit to compromised keys tied to the external bridge the project operated, not to any vulnerability in the layer-2 network’s core infrastructure.