Allbridge Paused After $1.65M Flash Loan Exploit on Solana
Allbridge halted its Core protocol following a $1.65 million flash loan attack on its Solana pools. The attacker manipulated pricing via a Kamino flash loan, drained funds, and bridged them to Ethereum. The team is investigating and plans to relaunch without liquidity pools.
Quick Take
Allbridge lost $1.65M in a flash loan attack on its Solana pools.
The attacker skewed pool prices using a $1.12M Kamino flash loan.
Funds were bridged to Ethereum; team urged LPs to withdraw immediately.
Allbridge plans to relaunch Core without liquidity pools after review.
Market Impact Analysis
BearishThe exploit undermines confidence in Allbridge and cross-chain protocols, potentially causing sell pressure on related tokens and caution among DeFi users.
Speculation Analysis
Key Takeaways
- Allbridge lost $1.65 million in a flash loan attack targeting its Solana liquidity pools.
- The attacker manipulated pool pricing using a $1.12 million flash loan from Kamino.
- Stolen funds were bridged to Ethereum; Allbridge paused the protocol and urged LP withdrawals.
- The team plans to relaunch Core without liquidity pools and is preparing a post-mortem.
- This follows a previous $573,000 exploit, intensifying scrutiny of the protocol's security.
What Happened
Allbridge, a cross-chain bridge protocol, paused its Core product on Sunday after an attacker exploited its Solana-based stablecoin liquidity pools. The attack drained approximately $1.65 million in assets. The protocol, which allows users to transfer assets between blockchains using native stablecoins like USDC and USDT rather than wrapped tokens, detected the breach and acted swiftly. The team urged all liquidity providers to withdraw funds immediately from affected pools and requested that arbitrage traders who profited from the resulting pool imbalances return the funds. Allbridge confirmed it is working on a detailed post-mortem and plans to relaunch Core without liquidity pools to prevent similar incidents. The team stated there is no ongoing threat to user funds.
The Numbers
The attacker utilized a $1.12 million flash loan from Solana lending protocol Kamino to execute the exploit. By performing a rapid series of stablecoin swaps, they manipulated the internal pricing mechanism of Allbridge’s pools, allowing them to extract assets at a discount. The total loss is estimated at $1.65 million, which was then bridged to an Ethereum address. This incident follows a previous security breach where Allbridge lost $573,000, compounding concerns about the protocol’s resilience against flash loan attacks. The use of flash loans to distort pool pricing is a known vulnerability in DeFi, and this event underscores the risks associated with liquidity pool-based bridges.
Why It Happened
The exploit stemmed from a vulnerability in how Allbridge’s Core protocol calculated asset prices within its liquidity pools. The attacker borrowed a large sum via a flash loan, temporarily skewed the pool’s internal exchange rates, and then withdrew assets at artificially favorable prices. Because flash loans require no collateral and are executed within a single transaction, the entire manipulation was completed in moments. Allbridge’s design, which relied on pool balances to determine pricing, proved susceptible to this type of manipulation. The incident highlights the broader challenge for DeFi protocols in securing liquidity pools against flash loan attacks, a recurring issue in the ecosystem.
Broader Impact
The exploit adds to the growing list of cross-chain bridge hacks, which have now accounted for billions in losses. It may erode user confidence in Allbridge and similar protocols that rely on liquidity pools. The decision to relaunch Core without liquidity pools could signal a shift in bridge design toward more secure models. Additionally, the incident may attract regulatory attention and reinforce calls for stronger security audits in the DeFi space.
What to Watch Next
- Allbridge’s forthcoming post-mortem report detailing the exact mechanics of the exploit and proposed fixes.
- Efforts to recover the stolen funds, including potential returns from arbitrage traders who capitalized on the imbalance.
- The relaunch of Allbridge Core without liquidity pools and its adoption, which could set a precedent for cross-chain bridge architecture.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
