SKN | Allbridge Halts Cross-Chain Bridge After $1.65 Million Flash Loan Exploit

Key Points

• Allbridge has paused its Allbridge Core protocol following a security incident that resulted in approximately $1.65 million in losses.
• The attacker allegedly used a flash loan and rapid stablecoin swaps to manipulate exchange rates before withdrawing liquidity at inflated values.
• Stolen funds were reportedly bridged from Solana to Ethereum and subsequently transferred into privacy-focused pools.
• The exploit is the latest in a series of attacks targeting cross-chain bridge protocols, highlighting ongoing security risks in decentralized finance (DeFi).

Cross-chain bridge operator Allbridge has temporarily suspended its Allbridge Core protocol after detecting a security incident that reportedly allowed an attacker to drain approximately $1.65 million from the platform.

The company announced the precautionary shutdown while investigations continue and advised liquidity providers with assets in affected pools to withdraw their funds as soon as possible.

The exploit primarily impacted Allbridge Core’s Solana deployment before the stolen assets were transferred across blockchains.

Flash Loan Attack Exploited Stablecoin Pool

Blockchain analysts said the attacker used a sophisticated flash loan strategy to manipulate pricing within Allbridge’s stablecoin liquidity pool.

According to onchain reports, the attacker borrowed approximately $1.12 million in USDC through a flash loan before executing a series of rapid USDC and USDT swaps that temporarily distorted the exchange rate within the bridge’s liquidity pool.

After creating the imbalance, the attacker withdrew liquidity at artificially favorable prices, repaid the flash loan and retained the remaining funds as profit.

The stolen assets were later bridged from Solana to Ethereum before being moved into privacy-focused transaction pools, making recovery more difficult.

Allbridge Appeals for Return of Arbitrage Profits

Following the exploit, Allbridge noted that the manipulated liquidity pool created a temporary arbitrage opportunity that may have benefited additional users.

The company appealed to anyone who profited from the pricing imbalance to voluntarily return those funds, stating that any recovered assets would be used to compensate affected liquidity providers.

The request reflects a growing trend among decentralized finance projects to seek community cooperation after security incidents while formal investigations continue.

Not the Platform’s First Flash Loan Exploit

The latest breach is not the first time Allbridge has fallen victim to a flash loan attack.

In April 2023, the protocol suffered another exploit involving its BNB Chain deployment, where attackers manipulated swap prices within liquidity pools and extracted approximately $573,000 worth of digital assets.

That earlier incident exposed vulnerabilities in the platform’s smart contract design, allowing attackers to profit by simultaneously acting as liquidity providers and traders.

Cross-Chain Bridges Remain Prime Targets

The attack adds to a growing list of security incidents involving cross-chain bridge infrastructure.

Because bridges often hold significant pools of assets that back tokens across multiple blockchain networks, they remain attractive targets for cybercriminals seeking large financial rewards.

Recent attacks have affected several blockchain ecosystems, including Taiko, Secret Network, Gravity Bridge, Verus Bridge and Butter Network, underscoring the persistent security challenges facing decentralized interoperability protocols.

Industry developers continue investing in improved auditing, monitoring and protocol design as cross-chain infrastructure becomes increasingly important to the broader blockchain ecosystem.

Outlook

The latest Allbridge exploit highlights the continuing security challenges facing decentralized finance, particularly cross-chain bridge protocols that manage substantial liquidity across multiple blockchains. As DeFi adoption expands, strengthening smart contract security and improving risk management will remain essential priorities for infrastructure providers seeking to protect user assets and maintain confidence in cross-chain financial services.