Ether Workshop: Allbridge Core was suspended after the attack and approximately $1.65 million was transferred to Ether Workshop

Allbridge Core suspended the protocol after a security incident on the side of Solana. The project participants indicated that this was a precautionary measure and reminded the liquidity providers of the affected pools to withdraw funds during the survey. The chain security agency Peck Shield estimated the loss at approximately $1.65 million.

The money has been transferred to the Ether House.

According to chain analysts, the attackers moved the funds from Solana to Ethera soon after they had obtained them. Such cross-chain transfers are often used to make tracing and recovery more difficult. Other analyses suggest that some of the funds may further flow to privacy-oriented infrastructure.

At the market level, analysts believe that the scale of the loss is still small compared to the overall market value of Solana, and therefore the direct impact on SOL prices may be limited. According to the report, SOL ' s latest report, US$ 76.66, a 24-hour increase of 1.06 per cent, resulted in transactions of approximately US$ 14.33 billion over the same period.

The way to attack is to point at the Flash.

According to a chain analysis, the incident was not a private key leak or a common cross-chain bridge verification gap. The attackers allegedly borrowed approximately $1.12 million in flash money from Kamino and then traded repeatedly in the Allbridge Core stabilization pool between USDC and USDT.

The analysis found that the process distorted the calculation of the internal exchange rate of the pool and created artificial imbalances. The attackers then drew their liquidity at the manipulated price and retained the difference as a gain after returning the principal of the Flash loan in the same transaction.

Single withdrawals of approximately $2.24 million

According to the analysis, the attack process can be summarized as “lending, manipulating, extracting, returning, retaining the difference”. One of the withdrawals was reported to be approximately $2.24 million. They are classified as typical lightning-pricing attacks, which have appeared in the DeFi agreement several times since 2020.

The central problem is that the pool pricing is over-reliant on the balance data that it can be manipulated for short periods of time, so that borrowed funds are sufficient to influence exchange rates. For Allbridge Core, the greater impact in the short term may lie not in SOL prices, but in confidence in the use of the bridge and the associated mobility pool.