Allbridge pauses bridge service after $1.65M exploit
Cross-chain bridge targeted due to security vulnerability.
1Attack Details
Allbridge Core reported a $1.65M security breach in its cross-chain stablecoin bridge. The attacker moved funds from Solana to Ethereum before transferring them to privacy pools. The company temporarily paused the protocol during the investigation.
2Flash Loan Exploit
The attacker took a $1.12M USDC flash loan from Kamino, manipulating USDC/USDT swap rates. This created a temporary arbitrage window by unbalancing Allbridge's stablecoin pool. The attacker withdrew liquidity at manipulated rates for profit.
3Previous Similar Attacks
This wasn't Allbridge's first flash loan attack. In April 2023, it lost $573K from its BNB Chain pool. The exploiter manipulated swap prices through a smart contract flaw, targeting BUSD and USDT.
4Industry-Wide Incidents
This marks at least the sixth cross-chain bridge attack since May. In June, Taiko reported $1.7M losses while Secret Network suffered a $4.67M exploit. Bridges remain prime targets due to their large liquidity pools.
5User Warnings
Allbridge urged users to withdraw funds from affected pools. The company requested those who profited from arbitrage to return funds, which would be allocated to compensate impacted liquidity providers.
6Security Concerns
The incident highlights recurring security flaws in cross-chain bridges. The series of DeFi attacks underscores the critical need for rigorous smart contract audits and enhanced risk management protocols.