Allbridge Core paused after $1.65 million flash-loan exploit

Allbridge paused its Allbridge Core cross-chain protocol after an attacker exploited its Solana stablecoin pools on July 20, 2026.

The attacker used a Kamino flash loan to manipulate the pools, extracting approximately $1.65 million before bridging the proceeds to Ethereum. In response, Allbridge halted the protocol and urged liquidity providers to withdraw funds from the affected pools.

The incident matters because it exposed another vulnerability in infrastructure used to move stablecoins across blockchains. It also accelerated Allbridge’s plan to replace its liquidity-pool-based routing model.

The exploit, approximate amount taken, movement of proceeds to Ethereum and protocol pause are confirmed in the supplied event package. The attacker’s identity, whether any funds will be recovered, the full impact on users and the timeline for restoring the protocol remain uncertain.