Key Takeaways:
Allbridge Core was pressured to halt its cross-chain bridge because of the flash-loan vulnerability, shedding about $1.65 million.Attackers manipulated stablecoin swimming pools earlier than shifting stolen funds from Solana to Ethereum.Allbridge is investigating and urged liquidity suppliers to withdraw from affected swimming pools.
One more cross-chain bridge has fallen prey to a classy DeFi exploit, underscoring the continued safety issues within the realm of interoperability bridges. The monetary loss could also be comparatively small in comparison with different large bridge hacks, although it’s yet one more reminder that flash loans are nonetheless an effective way to make the most of liquidity pool mechanics.
Allbridge Core is experiencing a safety incident.We have now paused the protocol as a precaution whereas we examine.
When you’ve got liquidity in affected swimming pools, please withdraw now.
The ensuing pool imbalance created a brief constructive arbitrage window. In the event you took benefit… pic.twitter.com/Ovg7yT35SM
— Allbridge (@Allbridge_io) July 19, 2026
Allbridge Halts Operations Following Flash Mortgage Assault
Cross-chain bridge Allbridge Core stopped its protocol after it was hacked and $1.65 million value of stablecoins have been drained from its infrastructure. The assault was noticed by a number of blockchain safety firms, akin to PeckShield and CertiK, quickly after the incident and the protocol has briefly halted actions as engineers work to know the vulnerability.
The attacker first acquired a $1.12 million flash mortgage from lending protocol Kamino on Solana, in keeping with on-chain investigators. The exploiter shortly exchanges all USDT and USDC within the swimming pools, impacting the trade charges of the swimming pools in Allbridge. By manipulating the value, the attacker may promote property at advantageous charges, after which purchase again the identical property on the identical transaction on the platform, paying at extra charges.
Learn Extra: Taiko Bridge Hack Drains $1.7M
The stolen funds have been later analyzed on the blockchain to find out that they have been transferred from Solana to Ethereum, a typical technique of attackers wishing to extend their liquidity and discover different methods to obscure funds.
Liquidity Suppliers Requested to Exit Affected Swimming pools
After the hack, Allbridge urged liquidity suppliers to tug their cash from affected swimming pools, because the protocol’s safety continues to be being reviewed. The assault brought on an imbalance, it opened up worthwhile arbitrage alternatives for a short while for the workforce within the affected swimming pools.
Curiously, Allbridge inspired merchants who profited from this quick time period worth imbalance to voluntarily repatriate any beneficial properties that they made in a public assertion. As per the protocol, the recovered cash would movement to affected liquidity suppliers in the course of the course of the investigation.
The undertaking has not but revealed a full technical after-action report on the undertaking as of the time of writing, nor has it introduced when bridge companies might be restored. The hacker path continues to be analysed by each builders and the safety group.
Flash Loans Proceed to Expose DeFi Weaknesses
Flash mortgage assaults are totally different from conventional hacks that contain utilizing stolen personal keys or hacking into infrastructure of their nature. Flash loans are uncollateralized and may solely be paid again in a single transaction, permitting a flash-loan assault to quickly entry a considerable amount of liquidity to affect asset costs or calculations throughout the protocol.
This exploit appears to have been based mostly on quick swaps to vary the ratios of the stablecoin swimming pools, relatively than on the cryptography of the bridge. The separation is an instance of the broader decentralized finance pricing conundrum: even the best-audited protocols might be inclined when liquidity circumstances or pricing assumptions are abused in excessive market conditions.
Learn Extra: Humanity Protocol Crashes 87%
