Cross-chain protocol Allbridge has temporarily paused its core bridge infrastructure following a security exploit that drained approximately $1.65 million from its Solana deployment. The incident marks at least the sixth major cross-chain bridge attack reported since May.
According to on-chain security telemetry, the attacker initiated the exploit by taking out a $1.12 million USDC flash loan via Kamino. The capital was deployed in rapid swap sequences across the USDC/USDT pool on Allbridge Core, severely distorting the internal exchange rate. By capitalizing on the artificially created price imbalance, the attacker withdrew pool liquidity at manipulated rates, repaid the initial Kamino flash loan, and netted $1.65 million in profit. The stolen funds were bridged from Solana to Ethereum and funneled into privacy protocols.
Allbridge has urged arbitrageurs who profited from the resulting pool imbalance to return the funds to assist in compensating affected liquidity providers. This marks the second flash loan exploit for the protocol, following a similar $573,000 breach on its BNB Chain deployment in April 2023.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.