An attacker took a $1.12M USDC flash loan from Kamino and distorted the USDC/USDT pool ratio on Allbridge Core's Solana deployment, netting ~$1.1M; a residual imbalance let third-party arbitrageurs capture another ~$550K, bringing total losses to ~$1.65M. Allbridge paused the protocol.
On July 19, 2026, an attacker took a $1.12M USDC flash loan from Kamino and used rapid swaps to distort the USDC/USDT pool ratio on Allbridge Core's Solana deployment. The attacker withdrew liquidity at the inflated valuation and repaid the loan in the same transaction, netting ~$1.1M. The residual imbalance opened an arbitrage window that third-party traders captured, bringing total losses to ~$1.65M. Allbridge paused the protocol and asked profiting traders to return funds. Proceeds were bridged from Solana to Ethereum via deBridge and routed through privacy pools (including Railgun). This was Allbridge's second flash-loan exploit after $573K in April 2023. PeckShield and CertiK reported.
Proceeds were bridged from Solana to Ethereum via deBridge and routed through privacy pools including Railgun. Allbridge paused the protocol and asked profiting traders to return funds.