{"id":34874,"date":"2026-07-20T06:07:57","date_gmt":"2026-07-20T06:07:57","guid":{"rendered":"https:\/\/bitunikey.com\/news\/allbridge-core-halted-after-1-65m-solana-exploit\/"},"modified":"2026-07-20T06:08:22","modified_gmt":"2026-07-20T06:08:22","slug":"allbridge-core-halted-after-1-65m-solana-exploit","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/allbridge-core-halted-after-1-65m-solana-exploit\/","title":{"rendered":"Allbridge Core halted after $1.65M Solana exploit"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">Allbridge Core has paused its cross-chain stablecoin protocol after a security incident on Solana that PeckShield estimated at about $1.65 million.\u00a0<\/p>\n<div id=\"cn-block-summary-block_afe5616aef6002b8af114b5a31bfabb0\" class=\"cn-block-summary\">\n<div class=\"cn-block-summary__nav tabs\">\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/div>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>Allbridge paused Core after a Solana exploit drained about $1.65 million, according to PeckShield estimates.<\/li>\n<li>The attacker used a $1.12 million USDC flash loan to quickly distort stablecoin pool rates.<\/li>\n<li>Allbridge urged liquidity providers to withdraw while investigators traced funds moved from Solana to Ethereum.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<p>The protocol told users with funds in affected liquidity pools to withdraw while its team investigates. PeckShield also <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/PeckShieldAlert\/status\/2079011150713561173\" target=\"_blank\" rel=\"nofollow\">said<\/a> the attacker moved the stolen assets from Solana to Ethereum.<\/p>\n<p>The incident appears to involve manipulation of Allbridge Core\u2019s USDC\/USDT liquidity pool. <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/OnchainLens\/status\/2079000826178425126\" target=\"_blank\" rel=\"nofollow\">Onchain Lens<\/a> said the attacker used a $1.12 million USDC flash loan from Kamino, changed the pool balance through rapid swaps and withdrew liquidity at distorted rates. The exact loss figure remains under review, with Onchain Lens describing more than $1.1 million extracted and PeckShield estimating the broader exploit at about $1.65 million.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<h2 class=\"wp-block-heading\"><strong>Allbridge pauses Core and warns liquidity providers<\/strong><\/h2>\n<p>\u201cAllbridge Core is experiencing a security incident,\u201d the team said in its <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/Allbridge_io\/status\/2078932561036722319?s=20\" target=\"_blank\" rel=\"nofollow\">public notice<\/a>. It added that the protocol had been paused as a precaution while the investigation continued. The project also issued a direct warning: \u201cIf you have liquidity in affected pools, please withdraw now.\u201d<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Allbridge Core is experiencing a security incident. <br \/>We have paused the protocol as a precaution while we investigate.<\/p>\n<p>If you have liquidity in affected pools, please withdraw now.<\/p>\n<p>The resulting pool imbalance created a temporary positive arbitrage window. If you took advantage\u2026 <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/t.co\/Ovg7yT35SM\">pic.twitter.com\/Ovg7yT35SM<\/a><\/p>\n<p>\u2014 Allbridge (@Allbridge_io) <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/x.com\/Allbridge_io\/status\/2078932561036722319?ref_src=twsrc%5Etfw\">July 19, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Allbridge said the attack left some pools temporarily out of balance. That imbalance created an arbitrage window that allowed some traders to profit from unusual pricing. The team asked anyone who benefited to consider returning funds to a recovery address. It said returned assets would go toward compensating affected liquidity providers. At the time of writing, the notice did not give a reopening date or publish a technical report.<\/p>\n<p>In addition, according to Onchain Lens, the attacker borrowed $1.12 million in USDC through a flash loan from Kamino. The attacker then carried out rapid USDC and USDT swaps that changed the ratio inside the Allbridge stablecoin pool. After the pool price moved, the attacker withdrew liquidity using the distorted rate and repaid the flash loan within the same transaction.<\/p>\n<p>Flash loans allow users to borrow and repay funds in one blockchain transaction without posting normal collateral. In this case, the loan itself was not described as the vulnerability. Instead, the borrowed liquidity allegedly gave the attacker enough capital to move the pool ratio and extract value before the transaction ended. PeckShield later said the stolen funds were bridged from Solana to Ethereum.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Allbridge faces another bridge security incident<\/strong><\/h2>\n<p>The latest Allbridge Core exploit follows an earlier attack against the project. As crypto.news previously reported, Allbridge suffered a separate exploit in April 2023 after an attacker manipulated the swap price of a BNB Chain pool. The loss was estimated at about $573,000, and the project later recovered roughly $465,000 after offering the attacker a white-hat reward.<\/p>\n<p>The new incident also comes during another active period for cross-chain security breaches. In May,the Verus-Ethereum bridge lost more than $11.5 million in an attack linked by researchers to missing validation checks. A separate crypto.news report said Transit Finance lost about $1.88 million in another cross-chain protocol exploit. Allbridge has not said whether the Solana incident shares technical similarities with those attacks.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Allbridge Core has paused its cross-chain stablecoin protocol after a security incident on Solana that PeckShield estimated at about $1.65 million.\u00a0 Summary Allbridge paused Core after a Solana exploit drained&hellip;<\/p>\n","protected":false},"author":1,"featured_media":29669,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-34874","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/34874","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=34874"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/34874\/revisions"}],"predecessor-version":[{"id":34875,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/34874\/revisions\/34875"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/29669"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=34874"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=34874"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=34874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}