Allbridge Hack
Estimated loss
$191K
Cross-Chain Message Validation Flaw
What happened
SlowMist reported an Allbridge exploit on August 19, 2026, affecting roughly $190,000 in the Base router. Its analysis describes a forged CCTP-style message credited as a deposit without a corresponding token burn. This was separate from the July Allbridge Core incident.
How it happened
The report describes insufficient validation of an attested cross-chain message. The attacker combined the false deposit credit with temporary liquidity to withdraw real router assets.
Protocol details
Classification
Bridge & Cross-Chain
Protocol Type
DeFi Protocol
Category
Bridge Hack
Implementation language
Solidity
Protocol links
Website
@Allbridge_io
Evidence
Proof of concept
1 availableSources
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
