Article Content
- •Allbridge Core paused operations after a $1.65 million exploit on July 20, 2026.
- •The attacker used a $1.12 million flash loan to manipulate liquidity pool ratios.
- •This incident is the sixth attack on cross-chain bridges since May 2026.
Allbridge Core paused its cross-chain bridge protocol on July 20, 2026, following a security incident that drained approximately $1.65 million from its Solana liquidity pools. The attacker utilized a $1.12 million flash loan from Kamino, manipulating stablecoin ratios through rapid swaps before withdrawing assets at distorted rates. The stolen funds were subsequently bridged to Ethereum and dispersed across multiple wallets. Allbridge urged users with liquidity in affected pools to withdraw their funds immediately and requested that those who profited from the temporary arbitrage return the funds to compensate affected liquidity providers. This incident marks the sixth attack on cross-chain bridges since May 2026, highlighting their vulnerability. Allbridge had previously faced a similar flash loan attack in April 2023, resulting in a loss of $573,000. The current exploit raises concerns about the security of cross-chain protocols and their susceptibility to manipulation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Allbridge in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell Attack Chain Compromises 25 Servers in U.S. Government Environment Dream reported a PHP2Shell attack chain that compromised 25 servers, including those in a U.S. government-affiliated environment. The investigation revealed that an exposed firewall management interface allowed attackers to access internal identity infrastructure. The attack utilized PHP2Shell (CVE-2026-109618 and…