Allbridge Core Paused After $1.65M Flash-Loan Exploit

The cross-chain bridge protocol Allbridge Core was exploited on Sunday, July -19, 2026, resulting in losses estimated at approximately $1.65 million. The attack targeted the protocol's stablecoin liquidity pools on the Solana blockchain, and the stolen funds were subsequently bridged to the Ethereum network. The Allbridge team has paused the protocol and launched an investigation.

According to blockchain analysis firms, the attacker executed the exploit using a flash loan. The exploiter borrowed $1.12 million in USDC from the Solana-based liquidity protocol Kamino. This capital was then used to manipulate the exchange rate within Allbridge Core's USDC-USDT pool through a series of rapid swaps, distorting the pool's ratios. The attacker then withdrew liquidity at the artificially favorable rates, repaying the flash loan in the same transaction and netting roughly $1.1 to $1.65 million in profit. The stolen assets were routed through privacy protocols in an attempt to obscure their trail.

In a public statement, the Allbridge team confirmed it had paused the protocol as a precaution and urged users to withdraw liquidity from affected pools. The team also acknowledged that the...