Allbridge Core paused its cross-chain bridge after attackers stole $1.65 million by exploiting its Solana deployment. The breach unfolded through a sophisticated flash loan operation that manipulated stablecoin prices, highlighting persistent vulnerabilities in decentralized finance protocols.
The Mechanics Behind the Exploit
The attackers took out a $1.12 million USDC flash loan via Kamino to rapidly swap between USDC and USDT tokens. These swaps distorted the exchange rates within Allbridge’s Solana liquidity pools, enabling withdrawals at artificially inflated values. Once the manipulated trades were completed, the flash loan was repaid instantly while the excess funds remained as the attackers’ profit. In response, Allbridge halted all impacted services and asked liquidity providers to withdraw funds immediately to prevent further losses.
This is not the first time Allbridge Core has faced such a crisis. In April 2023, a similar flash loan attack on BNB Chain resulted in a $573,000 loss due to smart contract vulnerabilities influencing swap pricing. The recurrence demonstrates that despite added security layers, flash loan-driven price manipulations remain a potent vector for compromises in DeFi systems.
Broader Implications for Cross-Chain Bridges
This incident fits into a troubling pattern of bridge hacks documented since May, involving protocols such as Taiko, Secret Network, Gravity Bridge, Verus Bridge, and Butter Network. Bridges attract attacks due to their custody of large, cross-chain liquidity pools, making them lucrative and high-impact targets. For decentralized finance users, these vulnerabilities raise critical concerns about the reliability of cross-network token movements.
Liquidity providers using Allbridge’s Solana pools bear the highest immediate risks. However, the wider DeFi ecosystem must heed this as a reminder of the urgent need for full smart contract audits, vigilant real-time monitoring, and innovative security frameworks that can detect and neutralize flash loan manipulations before damage occurs.
This article is for informational purposes and is not financial advice.
