Allbridge has suspended operations on its key cross-chain stablecoin bridge, Allbridge Core, following a $1.65 million loss from a flash loan attack on Solana. This incident echoes a similar exploit three years prior on the BNB Chain, raising concerns about recurring vulnerabilities within the protocol.
Details of the 2026 Solana Exploit
In July 2026, an attacker utilized a $1.12 million USDC flash loan from Kamino Finance to manipulate Allbridge's USDC/USDT liquidity pool on Solana. By rapidly swapping tokens, the attacker distorted the pool’s internal ratio and then withdrew funds at inflated rates before the pool could rebalance. This sequence of actions resulted in the bridge losing approximately $1.65 million.
Comparing Past and Present Attacks
The 2026 Solana exploit follows a pattern similar to the April 2023 attack on Allbridge’s deployment on the BNB Chain, where about $573,000 was drained. In that incident, the attacker acted as both liquidity provider and trader, manipulating pool pricing by swapping BSC-USD for BUSD to favorably skew balances before withdrawing liquidity. Both attacks employed flash loans to temporarily control significant capital and exploit pricing logic within liquidity pools.
Despite occurring on different blockchains and under distinct conditions, the resemblance between the two attacks points to a possible persistent architectural weakness in Allbridge’s protocol design. Analysts are debating whether the vulnerability is new or simply a recurrence of the same flaw manifesting on different chains.
Protocol Response and Industry Context
Following the Solana breach, Allbridge promptly paused Allbridge Core to prevent further damage while investigations continue. The rising trend of flash loan exploits highlights ongoing security challenges within DeFi protocols, especially those involving cross-chain liquidity pools.
This material is for informational purposes only and does not constitute financial advice.
