Allbridge, a cross-chain bridge protocol, has recently paused its Core protocol following a significant security breach. The incident involved an attacker exploiting a flash loan vulnerability to steal approximately $1.65 million from Allbridge's Solana stablecoin liquidity pools. This attack highlights the ongoing challenges faced by cross-chain systems in the DeFi space, which have become lucrative targets for malicious actors.
The attacker utilized a $1.12 million flash loan from the Kamino lending protocol to manipulate the pricing of Allbridge's pools. By distorting the internal accounting, the attacker was able to extract assets cheaply and bridge them to the Ethereum blockchain. This manipulation created a temporary positive arbitrage window, allowing other traders to take advantage of the mispriced assets.
This is not the first time Allbridge has fallen victim to such an exploit. In April 2023, a similar flash-loan attack drained around $573,000 from its BNB Chain pools. However, Allbridge managed to recover most of the funds and implement improvements in liquidity and withdrawal calculations.
The DeFi space, including cross-chain bridges and their associated liquidity pools, has become a prime target for hackers. In the first five months of 2026 alone, over $840 million was lost to DeFi hacks, with cross-chain systems contributing to some of the largest single losses. Just last month, a bridge between Axelar and Secret Network was drained of $4.67 million due to an 'infinite mint' bug in a custom token contract.
The recovery of the $1.65 million stolen from Allbridge's pools will depend on tracing the bridged funds and the willingness of arbitrage traders to return the misappropriated funds. The incident underscores the need for robust security measures and ongoing vigilance in the DeFi space, as these systems continue to evolve and become more complex.
This incident serves as a stark reminder of the risks associated with cross-chain protocols and the importance of implementing robust security measures to protect user funds. As the DeFi space continues to grow and evolve, it is crucial for projects like Allbridge to remain vigilant and proactive in addressing security vulnerabilities.
