What happened
On July 19, 2026, an attacker used a Kamino flash loan to manipulate Allbridge Core's Solana USDC/USDT pool ratio and internal exchange-rate calculation, extracting roughly $1.65 million in a single transaction. Allbridge paused Core and urged liquidity providers to withdraw from affected pools.
How it happened
- The attacker borrowed about $1.12 million USDC through a Kamino flash loan.
- They ran rapid USDC/USDT operations through Allbridge Core, distorting its virtual balance and internal pricing.
- The protocol released assets at the manipulated rate.
- The attacker repaid the loan in the same transaction and retained the difference before moving proceeds off Solana.
Protocol details
Classification
Bridge / Protocol Logic
Protocol Type
Exploit/Flash Loan Attack
Category
Bridge Hack
Implementation language
Rust
Protocol links
Website
@Allbridge_io
Evidence
- report @Allbridge_io incident report x.com
- report @coinminutes_en incident report x.com
- report @CertiKAlert incident report x.com
- analysis DeFiLlama defillama.com
- analysis How the $1.65M Allbridge Hack Unfolded bitok.org
- analysis Allbridge Core pauses protocol after $1.65 million flash loan exploit theblock.co
- analysis Cross-chain protocol Allbridge halts after $1.65 million flash loan exploit coindesk.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
