Allbridge Core (2026) — Crypto Hack
LaunderedAn attacker took a $1.12M USDC flash loan from Kamino and distorted the USDC/USDT pool ratio on Allbridge Core's Solana deployment, netting ~$1.1M; a residual imbalance let third-party arbitrageurs capture another ~$550K, bringing total losses to ~$1.65M. Allbridge paused the protocol.
Summary
An attacker took a $1.12M USDC flash loan from Kamino and distorted the USDC/USDT pool ratio on Allbridge Core's Solana deployment, netting ~$1.1M; a residual imbalance let third-party arbitrageurs capture another ~$550K, bringing total losses to ~$1.65M. Allbridge paused the protocol.
How It Was Compromised — Bridge via Flash Loan Pool-Ratio Manipulation
On July 19, 2026, an attacker took a $1.12M USDC flash loan from Kamino and used rapid swaps to distort the USDC/USDT pool ratio on Allbridge Core's Solana deployment. The attacker withdrew liquidity at the inflated valuation and repaid the loan in the same transaction, netting ~$1.1M. The residual imbalance opened an arbitrage window that third-party traders captured, bringing total losses to ~$1.65M. Allbridge paused the protocol and asked profiting traders to return funds. Proceeds were bridged from Solana to Ethereum via deBridge and routed through privacy pools (including Railgun). This was Allbridge's second flash-loan exploit after $573K in April 2023. PeckShield and CertiK reported.
Fund Flow & Laundering Analysis
Proceeds were bridged from Solana to Ethereum via deBridge and routed through privacy pools including Railgun. Allbridge paused the protocol and asked profiting traders to return funds.