Cross-chain agreement Allbridge is suspended for a $1.65 million lightning attack

The Cross Chain Agreement Allbridge suspended its Cross Chain Stabilisation Currency Agreement following an attack on about $1.65 million. According to the security companies Certik and Peck Shield, the attackers used the $1.12 million lightning loan from the Solana loan agreement, Kamino, to quickly exchange USDC and USDT to manipulate the internal ratio of the mobility pool to extract assets at a favourable price. The stolen assets have been bridged to an address of the Taifeng and dispersed to multiple addresses, and it is not clear how much of the remaining assets are under the control of the attackers. Allbridge indicated that the agreement had been suspended for investigation and requested that the liquidity provider withdraw funds from the affected pool. The manipulation resulted in an imbalance in the mobility pool and created temporary arbitrage opportunities. Allbridge suffered a similar lightning attack in 2023, resulting in a loss of approximately $650,000. The company raised $2 million in 2022 to expand the bridge service and to finance security audits。