Cross-chain Bridge Allbridge under Core protocol suspended. The project ' s stable currency flow pool on Solana was hit by lightning and lost approximately $1.665 million. The projecter indicated that the agreement had been discontinued and the investigation had been initiated, while the mobility provider of the affected pool was required to withdraw the funds as soon as possible.
The attack took place in Solana.
Allbridge Core uses the original stable currency flow pool to complete cross-chain conversion to support assets such as USDC, USDT and not rely on sealed tokens. According to project parties and chain security agencies, the attackers started with Solana Loan Agreement Kamino to launch some $1.12 million in lightning loans, which then distorted the in-pool pricing through a series of fast-stabilized currency exchange.
When prices were pushed, the attackers exchanged large USDCs for lower costs. CertiK states that at one time the attackers exchanged US$ 2.24 million for USDC with US$ thousands of USDTs, then transferred funds from Solana to the ETA address and continued to move them in a decentralized manner.
Project request LP withdrawal
Allbridge states that after the pool was unbalanced, the market was short-lived with a positive arbitrage window, allowing some traders to buy assets that had been wrongly priced. The projector has called upon the traders who profit from the window to return the funds to their designated address, stating that the funds will be used directly to compensate the affected liquidity providers.
At present, Allbridge states that more detailed incident statements and ex post analysis reports are being prepared. The team also indicated that an attempt was being made to restart Core without relying on the mobile pool and stated that there was no further threat to current user mobility.
This is the second such incident.
This is not the first time that Allbridge has been attacked in the same way. In April 2023, the project ' s pool on BNB Chain also lost approximately US$ 57.33 million due to a similar flash loan gap. The projector stated at that time that the bulk of the funds had been recovered and that the method of calculating liquidity and withdrawal had been adjusted.
The Trans-Cyber Bridge and its accompanying flow pool have been DeFi's attack on high-risk areas. It is reported that in the first five months of 2026, the damage caused by the DeFi attack exceeded $840 million. Just last month, a cross-chain bridge between Axelar and Secret Network also lost about $4.67 million due to an “unlimited increase” gap in the currency contract.
Allbridge is still on hold. The amount of money that can eventually be recovered depends on the tracking of money after the chain and whether the relevant arbitrage traders will return the profit.