Allbridge Suspends Operations Following $1.65 Million Flash Loan Exploit

Allbridge Suspends Operations Following $1.65 Million Flash Loan Exploit

Allbridge, a cross-chain protocol, has temporarily halted its services after suffering a flash loan exploit that resulted in the loss of approximately $1.65 million from its Solana liquidity pools. The incident was reported by security firms CertiK and PeckShield on July 20, 2026.

Details of the Exploit

The exploit was executed using a $1.12 million flash loan sourced from the Solana lending protocol Kamino. This allowed the attacker to manipulate internal pool ratios by rapidly swapping stablecoins like USDC and USDT, which enabled them to withdraw assets at advantageous rates before transferring the stolen funds.

Response to the Attack

In response to the exploit, Allbridge has paused its protocol to thoroughly investigate the incident. The company has advised liquidity providers to withdraw their funds from the affected pools. During the manipulation, the liquidity pools became unbalanced, creating opportunities for temporary arbitrage.

Recovery Efforts

Allbridge has reached out to traders who may have profited from the pricing distortions created during the exploit, asking them to return funds intended for liquidity provider compensation.

Historical Context

This is not the first time Allbridge has faced such challenges. In 2023, the protocol experienced a similar incident that drained roughly $650,000 from its BNB Chain pools. The company later reported recovering most of those funds and made changes to its liquidity and withdrawal protocols to prevent future occurrences.

Company Background

Allbridge serves as a bridge to facilitate the transfer of assets across different blockchains that lack direct communication, utilizing liquidity pools to move native stablecoins without the need for wrapped versions. In 2022, the company raised $2 million aimed at expanding its services and funding security audits.