Allbridge Suspends Core Protocol After $1.65M Solana Flash Loan Exploit

TheNewsCryptoPublicado a 2026-07-20Actualizado a 2026-07-20

Resumen

Cross-chain protocol AllBridge Core suspended operations after suffering a $1.65 million flash loan exploit on its Solana deployment. The attacker manipulated a stablecoin pool's exchange rate using a $1.12 million USDC loan from Kamino, creating a price imbalance to perform a profitable arbitrage. Stolen funds were moved to Ethereum via privacy pools. This is the protocol's second such attack, following a $573,000 exploit in April 2023. The suspension causes operational delays, reduces cross-chain liquidity, and highlights persistent security vulnerabilities in bridge protocols and automated market maker systems.

Cross-chain platform AllBridge Core shut down its operations following a security issue that resulted in the loss of $1.65 million on Sunday. The hack specifically occurred within the AllBridge Core deployment on the Solana blockchain. The attacker transferred the funds stolen via the bridge from Solana to the Ethereum blockchain. The hacker swiftly transferred the stolen funds through privacy pools to cover his tracks.

The perpetrator executed a well-thought-out flash-loan strategy to influence the exchange rate in the pool for stablecoins. As per on-chain data, the hacker took out a loan of $1.12 million in USDC from the lending platform Kamino. Quick switching between USDC and USDT led to a price imbalance within the pool balance. This price imbalance created a favorable arbitrage opportunity for the perpetrator.

The exploiter then took the liquidity from the pool at exaggerated prices to gain huge profits. The profit earned after repayment of the Kamino loan was retained by the perpetrator as loot. The entire trade reveals major flaws in the mathematical equation of the automated market maker pricing system.

Recurrent Cross-Chain Bridge Attacks

This particular event marks the second instance of an attack on Allbridge Core via a flash loan hack, after a previous $573,000 heist targeting its BNB Chain pools in April 2023. In addition, pausing the bridge would mean that there are operational delays, with the process of sending funds across chains coming to a temporary halt. This would have implications not only for trading operations but would reduce the possibility of the liquidity needed by traders and institutions being moved across.

At the same time, there is a threat that long-term protocol outages will mean the loss of revenue streams due to reduced transactions, thus making users and liquidity providers consider alternative means of bridging. Finally, security pauses in cross-chain protocols act as a reminder about the security challenges associated with liquidity pools, thus requiring investors to change their risk management strategy for bridges.

Highlighted Crypto News:
FTX Bankruptcy Estate Plans $900 Million Distribution, Total Payouts Hit $10 Billion

Criptos en tendencia

CitreaCTR

wrapped stUSDTWSTUSDT

Velodrome FinanceVELODROME

BrevisBREV

ZRX（0X）ZRX

PancakeSwapCAKE

Preguntas relacionadas

QWhat was the main action taken by Allbridge Core after the security incident?

AAllbridge Core shut down its operations, suspending its core protocol following the exploit.

QWhat type of attack strategy did the hacker use in the Allbridge exploit?

AThe hacker executed a flash loan strategy, specifically taking out a large USDC loan from the Kamino lending platform on Solana.

QHow did the attacker's actions create an opportunity for profit?

ABy quickly swapping between USDC and USDT, the attacker created a price imbalance in the liquidity pool, which allowed them to withdraw liquidity at exaggerated prices for a large profit after repaying the flash loan.

QWhat does the article mention about previous similar incidents involving Allbridge?

AThe article states this is the second flash loan attack on Allbridge Core, with a previous heist of $573,000 targeting its BNB Chain pools in April 2023.

QWhat are some potential consequences of a core protocol being paused, as mentioned in the article?

AConsequences include operational delays for cross-chain transfers, reduced liquidity movement for traders and institutions, potential loss of revenue from reduced transactions, and users possibly seeking alternative bridging solutions.

Lecturas Relacionadas

3 Million-Follower Goddess Fully AI-Synthesized, Fake Orphanage, Cross-Border ‘Fake Charity’ Collapses Overnight

An Australian influencer named Lily Jay, with nearly 3 million Instagram followers, is at the centre of a major AI-fueled charity scam. Her 'Lily Jay Foundation' claimed to build orphanages, mosques, and deliver aid in places like Uganda and Gaza, using emotionally powerful videos of herself with children. However, an investigation by ABC NEWS Verify revealed these scenes—including a key video announcing an orphanage's opening—were entirely AI-generated, complete with telltale flaws like garbled text on clothing. The foundation's 'humanitarian award' was also faked using AI images. The foundation admitted in small print on its website that it is not a registered charity, avoiding financial transparency laws. While based in Kosovo, its operations and the influencer's lavish personal lifestyle raised further red flags. Following media inquiries, the foundation selectively hid donation buttons and removed fraudulent content for Australian visitors, but kept them active internationally. Experts warn this case is a textbook example of how AI can be weaponized to exploit public trust and generosity, creating believable but entirely fabricated narratives of aid. The incident highlights the growing danger of deepfakes in eroding trust within the charitable sector, urging donors to critically verify causes before giving.

marsbitHace 5 min(s)

3 Million-Follower Goddess Fully AI-Synthesized, Fake Orphanage, Cross-Border ‘Fake Charity’ Collapses Overnight

marsbitHace 5 min(s)

L2 'Recalibration': When L1 Becomes Its Own Rollup, What Is Ethereum's Endgame?

The article discusses the evolving relationship between Ethereum's Layer 1 (L1) and Layer 2 (L2) solutions, moving beyond the initial "L2 for scaling" model. As Ethereum L1 itself scales (increasing Gas Limit, statelessness, zkEVM), the unique value proposition of L2s shifts from merely providing cheap execution to offering differentiated features like application-specific optimization, privacy, and flexible governance. The piece explores three key themes: 1. **L2's New Role:** L2s are transitioning from a pure scaling technology to a spectrum of execution environments with varying degrees of security inheritance from Ethereum L1. 2. **Interoperability as State Trust:** Solving L2 fragmentation is less about cross-chain bridges and more about enabling faster, trust-minimized state verification between environments. This involves initiatives like faster L1 finality, intent-based architectures (Open Intents Framework), and native account abstraction. 3. **Blurring Layers:** With the potential integration of zk-proofs into L1 validation (making L1 akin to its own "Rollup") and the concept of "Native Rollups," the rigid boundary between L1 and L2 may fade. The future could be a unified system with multiple execution domains (for DeFi, gaming, privacy, etc.) sharing a common security, settlement, and state framework. In conclusion, Ethereum's goal is not to abandon L2s or re-centralize everything on L1, but to re-integrate the fragmented user experience—liquidity, accounts, applications—while preserving the scaling benefits of a multi-environment ecosystem. The endgame is a cohesive "one chain" feeling for users, powered by diverse but securely interconnected execution layers.

marsbitHace 8 min(s)

L2 'Recalibration': When L1 Becomes Its Own Rollup, What Is Ethereum's Endgame?

marsbitHace 8 min(s)

Grayscale Files First Spot Worldcoin ETF With SEC Under GWLD Ticker

Grayscale Investments has filed with the SEC to launch a Worldcoin spot ETF (ticker GWLD), aiming to provide U.S. investors regulated access to the token. The filing coincided with WLD trading near its all-time low, though the news triggered an 8% price surge. The application also highlights potential risks, including high token concentration among top wallets and ongoing insider token unlocks through 2028, which could create selling pressure. Additionally, Worldcoin's use of biometric data presents unique regulatory challenges. Grayscale's move expands its crypto ETF lineup ahead of potential competitors, though SEC approval remains uncertain.

TheNewsCryptoHace 21 min(s)

Grayscale Files First Spot Worldcoin ETF With SEC Under GWLD Ticker

TheNewsCryptoHace 21 min(s)

The Eternal Fragment of Money: Third-Party Payments Lack a First Principle

The Eternal Fragments of Money: Third-Party Payment Has No First Principle The article examines the fragmented and competitive landscape of third-party payment, using Stripe's rumored acquisition of PayPal as a starting point. It argues the payment industry is characterized by persistent fragmentation and remains fundamentally tied to traditional banking infrastructure, hindering attempts at total domination. Stripe, despite its developer-centric success, faces growth challenges and missed its peak valuation window during the pandemic. Its recent ventures into stablecoins (OUSD) and Agent-centric payment protocols are seen as attempts to capture future narratives and bolster its IPO prospects, though their success is uncertain. The author posits that payment itself is merely an entry point; future profits for companies like Stripe and Circle may lie in building efficient backend清算 (clearing/settlement) networks, potentially operating more independently from traditional banks. The piece concludes that the payment industry is a perpetual, trench-warfare-like competition where scale alone cannot eliminate regional or niche players.

marsbitHace 31 min(s)

The Eternal Fragment of Money: Third-Party Payments Lack a First Principle

marsbitHace 31 min(s)

The Encryption Bill Clarity's Challenge: A Thorny Path of Bipartisan Compromise in the U.S.

U.S. lawmakers are attempting to advance the Clarity Act, a significant crypto market structure bill, but its path is fraught with partisan hurdles. The process has been rocky since January, when a prior bipartisan deal in the Senate Banking Committee was upended. A key compromise in May on "yield" issues allowed the bill to move forward in committee, but only with the conditional support of two Democratic senators, Angela Alsobrooks and Ruben Gallego. They emphasized that their final vote depends on reaching an agreement on ethics provisions for elected officials. Ultimately, the Senate Agriculture Committee passed its version along party lines without Democratic support. As Republicans push for a full Senate vote in July, the demand for strong ethics language has expanded beyond Democrats. Additional controversies surround provisions related to yields (aligning some Republicans with large banks) and developer protections (opposed by enforcement agencies). Core concerns about illicit finance and consumer protection remain central to the debate. Despite consensus on the need for legislation, achieving the necessary bipartisan compromise is proving difficult. While momentum exists—including recent meetings between senators and White House officials—a reconciled bill text faces skepticism. Senator Gallego has stated that without ethics terms acceptable to Democrats, they will not provide the needed votes. The immediate goals for the crypto community in Congress are unclear: a symbolic Senate vote before the August recess, eventual passage into law by 2026, or forging a final compromise framework. The arduous, vote-by-vote effort to build bipartisan support continues, mirroring the traditional legislative grind the industry must now navigate.

Foresight NewsHace 59 min(s)

The Encryption Bill Clarity's Challenge: A Thorny Path of Bipartisan Compromise in the U.S.

Foresight NewsHace 59 min(s)

Trading

Spot

Artículos destacados

Cómo comprar CORE

¡Bienvenido a HTX.com! Hemos hecho que comprar CORE (CORE) sea simple y conveniente. Sigue nuestra guía paso a paso para iniciar tu viaje de criptos.Paso 1: crea tu cuenta HTXUtiliza tu correo electrónico o número de teléfono para registrarte y obtener una cuenta gratuita en HTX. Experimenta un proceso de registro sin complicaciones y desbloquea todas las funciones.Obtener mi cuentaPaso 2: ve a Comprar cripto y elige tu método de pagoTarjeta de crédito/débito: usa tu Visa o Mastercard para comprar CORE (CORE) al instante.Saldo: utiliza fondos del saldo de tu cuenta HTX para tradear sin problemas.Terceros: hemos agregado métodos de pago populares como Google Pay y Apple Pay para mejorar la comodidad.P2P: tradear directamente con otros usuarios en HTX.Over-the-Counter (OTC): ofrecemos servicios personalizados y tipos de cambio competitivos para los traders.Paso 3: guarda tu CORE (CORE)Después de comprar tu CORE (CORE), guárdalo en tu cuenta HTX. Alternativamente, puedes enviarlo a otro lugar mediante transferencia blockchain o utilizarlo para tradear otras criptomonedas.Paso 4: tradear CORE (CORE)Tradear fácilmente con CORE (CORE) en HTX's mercado spot. Simplemente accede a tu cuenta, selecciona tu par de trading, ejecuta tus trades y monitorea en tiempo real. Ofrecemos una experiencia fácil de usar tanto para principiantes como para traders experimentados.

287 Vistas totalesPublicado en 2024.12.13Actualizado en 2026.06.02

Discusiones

Bienvenido a la comunidad de HTX. Aquí puedes mantenerte informado sobre los últimos desarrollos de la plataforma y acceder a análisis profesionales del mercado. A continuación se presentan las opiniones de los usuarios sobre el precio de CORE (CORE).