Three Crypto Exploits in 24 Hours: Protocol Losses Top $35 Million

A wave of attacks hit three crypto protocols within a 24-hour span, pushing combined losses above $35.5 million. The incidents played out across three chains and involved different tactics, but the common thread was familiar: cross-chain bridges remain one of DeFi's most vulnerable pressure points. The biggest loss was recorded by AFX, an Arbitrum-based protocol that saw about $24.15 million in USDC taken in a bridge exploit on July 22. On BNB Chain, BSquaredNetwork lost $3.86 million worth of B2 tokens. Ethereum-based Verus suffered a further $7.55 million hit via its cross-chain bridge on July 23, compounding an earlier exploit of roughly $11.58 million in May 2026. AFX: bridge exploited, funds bridged and swapped Attackers siphoned $24.15 million in USDC from AFX's bridge infrastructure on Arbitrum. The funds were then moved to Ethereum and swapped into about 12,467.5 ETH. BSquaredNetwork: token dump triggers price shock BSquaredNetwork's loss was smaller in dollar terms but had immediate market consequences. The stolen $3.86 million in B2 tokens were swapped for more than 5,000 WBNB and later converted into roughly 1,128 ETH. The selling pressure drove B2 down more than 15%. Verus: repeat bridge losses raise alarm Verus's $7.55 million loss would be serious on its own. It becomes more concerning given the same bridge was exploited for approximately $11.58 million in May 2026. In roughly two months, Verus has lost more than $19 million, pointing to what appear to be related security gaps. PeckShield was among the first blockchain security firms to flag the incidents on-chain. A harsh quarter for crypto security The attacks arrive amid a broader deterioration in crypto security metrics. TRM Labs data shows the first half of 2026 logged a record 207 security incidents. Q2 alone accounted for $764 million stolen across 67 incidents, with operational weaknesses cited as a key attack surface. Bridge risks have been a longstanding concern. Vitalik Buterin warned as early as 2022 that multichain systems carry different trust assumptions than single-chain applications. What investors should take away BSquaredNetwork's 15%+ drop illustrates how quickly a security breach can translate into market damage. A cluster of exploits in a single day tends to curb risk appetite across DeFi. The $764 million stolen in Q2 2026 represents capital effectively removed from the ecosystem—money that would otherwise support development, liquidity, and lending activity. Verus offers a clear lesson for investors: a protocol that suffers a hack and fails to fully address root vulnerabilities before being exploited again is sending a signal about its security posture. One incident can be misfortune. A second is information.