Phishing Alerts Mount Over Circle’s Arc Bridge as Users Report USDC Theft

Users of Circle’s stablecoin-focused layer-one blockchain, Arc, have reported a series of phishing incidents involving OnBridge, the platform’s cross-chain bridge page. Multiple cryptocurrency communities have flagged that held USDC was allegedly sent directly to attackers’ addresses after the cross-chain function was used. The reports have triggered growing concerns about the security of cross-chain operations and the sophistication of phishing tactics targeting DeFi users.

How the Phishing Attacks Unfold

According to user reports across various forums and social media channels, the phishing attacks appear to target users who interact with OnBridge, the official cross-chain bridge for Arc. Victims claim that after initiating a cross-chain transaction, their USDC was redirected to addresses controlled by attackers. The exact method of compromise remains under investigation, but security experts suspect that users may have been lured to malicious versions of the OnBridge interface, either through search engine ads, phishing emails, or compromised social media posts.

The reports highlight a persistent vulnerability in the crypto ecosystem: users often rely on bookmarked links or search results to access dApps, which can be spoofed by malicious actors. In this case, the fake interfaces likely mimicked the legitimate OnBridge page, capturing user approvals or private keys. Once the transaction was signed, the funds were transferred to attacker-controlled wallets.

Implications for Cross-Chain Security

The incident underscores the inherent risks of cross-chain bridges, which have historically been targets for hacks and exploits due to their complexity and the large amounts of funds that flow through them. While this particular case appears to be a phishing campaign rather than a smart contract vulnerability, it raises questions about the overall security posture of new blockchain networks like Arc.

Circle, the company behind USDC and a key player in Arc’s development, has not yet issued an official statement addressing the reports. The lack of a coordinated response has left users uncertain about the safety of using OnBridge. In the meantime, security analysts advise users to verify URLs carefully, avoid clicking on links from unsolicited messages, and use hardware wallets to add an extra layer of protection.

Why This Matters to Crypto Users

For everyday users, this incident serves as a reminder that phishing attacks remain one of the most common and effective ways to steal cryptocurrency. Unlike exchange hacks or protocol exploits, phishing relies on human error, making it harder to defend against with technical measures alone. The fact that the attacks are targeting a relatively new bridge on a new blockchain suggests that scammers are quick to adapt to emerging platforms.

Users should also be aware that cross-chain transactions often require approving token contracts, which can be exploited if the interface is malicious. Always double-check the contract address and the exact URL of the dApp before signing any transaction. If in doubt, it is safer to avoid the transaction entirely.

Conclusion

The phishing reports surrounding Arc’s OnBridge highlight a growing threat in the DeFi space. While the full scope of the attacks is still unfolding, the incidents serve as a critical reminder for users to exercise caution when interacting with cross-chain bridges. As investigations continue, affected users are advised to report any suspicious activity to relevant authorities and to monitor their wallet addresses for unauthorized transactions.

FAQs

Q1: What is OnBridge on Arc?
OnBridge is the official cross-chain bridge for Arc, Circle’s layer-one blockchain, allowing users to transfer assets like USDC between different networks.

Q2: How can I protect myself from phishing attacks on cross-chain bridges?
Always verify the exact URL of the bridge, use a hardware wallet, never share your private keys, and double-check contract addresses before signing any transaction.

Q3: Is my USDC safe if I’ve used OnBridge recently?
If you haven’t noticed any unauthorized transactions, your funds may be safe, but it’s recommended to monitor your wallet activity and consider revoking any token approvals that you might have granted to suspicious contracts.