Three DeFi exploits drain $35.5 million within hours as AFX, Verus and B² Network hit
On July 23, 2026, three major security incidents hit DeFi. An AFX-operated USDC custody bridge on Arbitrum was exploited for $24.15 million, prompting an emergency suspension of bridge operations. The Verus Ethereum Bridge was breached for $7.55 million in a repeat of the same failure mode seen since May, while B² Network’s $B2 staking contract upgrade authority was compromised for $3.86 million and staking has been paused pending security reviews.