Allbridge Tangguhkan Protokol Inti Setelah Eksploitasi Pinjaman Kilat Solana senilai $1,65 Juta

TheNewsCrypto2026-07-20 tarihinde yayınlandı2026-07-20 tarihinde güncellendi

Özet

Platform lintas rantai Allbridge Core menghentikan operasinya setelah insiden keamanan yang mengakibatkan kerugian $1,65 juta pada hari Minggu. Eksploitasi terjadi pada deployment AllBridge Core di blockchain Solana. Pelaku mengeksekusi strategi pinjaman kilat (flash loan) yang matang dengan meminjam $1,12 juta USDC dari platform Kamino. Manipulasi cepat antara USDC dan USDT menciptakan ketidakseimbangan harga dalam pool, yang kemudian dimanfaatkan pelaku untuk mengambil likuiditas pada harga yang tidak wajar dan meraih keuntungan besar setelah melunasi pinjamannya. Insiden ini mengungkap kelemahan dalam sistem penentuan harga automated market maker (AMM). Ini adalah serangan kedua kalinya pada AllBridge Core menggunakan metode serupa, setelah peretasan senilai $573.000 di pool BNB Chain pada April 2023. Penangguhan operasi bridge menyebabkan penundaan pengiriman dana lintas rantai, memengaruhi perdagangan dan pergerakan likuiditas. Pemadaman protokol yang berkepanjangan berisiko mengurangi aliran pendapatan dan dapat membuat pengguna serta penyedia likuiditas mempertimbangkan alternatif lain. Insiden ini menegaskan kembali tantangan keamanan yang melekat pada pool likuiditas dan protokol lintas rantai.

Platform lintas rantai AllBridge Core menghentikan operasinya menyusul masalah keamanan yang mengakibatkan kerugian $1,65 juta pada hari Minggu. Peretasan ini khususnya terjadi dalam penyebaran AllBridge Core di blockchain Solana. Penyerang mentransfer dana yang dicuri melalui jembatan dari Solana ke blockchain Ethereum. Hacker dengan cepat mentransfer dana curian melalui kumpulan privasi untuk menutupi jejaknya.

Pelaku mengeksekusi strategi pinjaman kilat yang dipikirkan matang untuk memengaruhi nilai tukar di kumpulan untuk stablecoin. Menurut data on-chain, hacker mengambil pinjaman sebesar $1,12 juta dalam USDC dari platform peminjaman Kamino. Pergantian cepat antara USDC dan USDT menyebabkan ketidakseimbangan harga dalam neraca kumpulan. Ketidakseimbangan harga ini menciptakan peluang arbitrase yang menguntungkan bagi pelaku.

Eksploiter kemudian mengambil likuiditas dari kumpulan dengan harga yang berlebihan untuk mendapatkan keuntungan besar. Keuntungan yang diperoleh setelah pelunasan pinjaman Kamino dipertahankan oleh pelaku sebagai jarahan. Seluruh perdagangan mengungkapkan kelemahan besar dalam persamaan matematika dari sistem penetapan harga pembuat pasar otomatis.

Serangan Berulang pada Jembatan Lintas Rantai

Peristiwa khusus ini menandai insiden kedua serangan terhadap AllBridge Core melalui peretasan pinjaman kilat, setelah perampokan sebelumnya senilai $573.000 yang menargetkan kumpulan BNB Chain-nya pada April 2023. Selain itu, menjeda jembatan akan berarti adanya penundaan operasional, dengan proses pengiriman dana antar rantai terhenti sementara. Hal ini akan memiliki implikasi tidak hanya pada operasi perdagangan tetapi akan mengurangi kemungkinan pergerakan likuiditas yang dibutuhkan oleh pedagang dan institusi.

Pada saat yang sama, ada ancaman bahwa pemadaman protokol jangka panjang akan berarti hilangnya aliran pendapatan akibat berkurangnya transaksi, sehingga membuat pengguna dan penyedia likuiditas mempertimbangkan cara alternatif untuk menjembatani. Akhirnya, jeda keamanan dalam protokol lintas rantai bertindak sebagai pengingat tentang tantangan keamanan yang terkait dengan kumpulan likuiditas, sehingga mengharuskan investor mengubah strategi manajemen risiko mereka untuk jembatan.

Berita Crypto yang Disorot:
Perkebunan Kebangkrutan FTX Berencana Distribusi $900 Juta, Total Pembayaran Mencapai $10 Miliar

Trend Kriptolar

CitreaCTR

wrapped stUSDTWSTUSDT

İlgili Sorular

QMengapa Allbridge Core menghentikan operasinya?

AAllbridge Core menghentikan operasinya setelah insiden keamanan yang menyebabkan kerugian sebesar $1,65 juta akibat eksploitasi pinjaman kilat (flash loan) di blockchain Solana.

QBagaimana cara penyerang mengeksekusi eksploitasi pinjaman kilat (flash loan) ini?

APenyerang meminjam $1,12 juta USDC dari platform Kamino, lalu dengan cepat melakukan pertukaran antara USDC dan USDT untuk menciptakan ketidakseimbangan harga di pool. Ketidakseimbangan ini menciptakan peluang arbitrase yang menguntungkan, memungkinkan pelaku mengambil likuiditas dengan harga yang tidak wajar untuk mendapatkan keuntungan besar.

QApa dampak dari penangguhan (pause) jembatan cross-chain Allbridge Core?

APenangguhan menyebabkan penundaan operasional dan menghentikan sementara proses pengiriman dana antar rantai. Hal ini berdampak pada operasi perdagangan dan mengurangi kemampuan untuk memindahkan likuiditas yang dibutuhkan oleh pedagang dan institusi.

QApakah ini pertama kalinya Allbridge Core mengalami serangan seperti ini?

ATidak, ini adalah serangan kedua. Pada April 2023, Allbridge Core juga menjadi sasaran peretasan pinjaman kilat yang menyebabkan kerugian $573.000 yang menargetkan pool BNB Chain-nya.

QApa yang diungkapkan oleh eksploitasi ini tentang sistem Allbridge Core?

AEksploitasi ini mengungkapkan kelemahan utama dalam persamaan matematika sistem penetapan harga pembuat pasar otomatis (automated market maker pricing system) yang digunakan oleh protokol tersebut.

İlgili Okumalar

Attention, Bitcoin Users! Today's Hack May Be Larger Than You Think. Here's What to Do

Bitcoin users are urged to take immediate action following the disclosure of a critical security vulnerability. Hardware wallet manufacturer Coinkite has revealed a flaw in the seed phrase generation process for certain Coldcard Mk3 devices running firmware versions 4.0.1 through 5.0.3. All bitcoin addresses created from seed phrases generated on these potentially affected devices are now considered at risk. This warning coincides with an ongoing investigation into a major hack that drained approximately 1,082.65 BTC (worth roughly $70.2 million at the time) from 1,196 single-signature wallets in just 41 minutes on July 30. Security analysts believe the coordinated thefts, which used identical transaction fees and left no change, were executed by an automated tool scanning for compromised private keys. Notably, this attack occurred about 30 hours before Coinkite's public disclosure of the Coldcard vulnerability, raising concerns of a possible connection. Experts strongly recommend that impacted Coldcard Mk3 users do not consider their old seed phrase safe. The advised course of action is to generate a completely new, secure seed phrase on a trusted, modern hardware wallet and then transfer all funds to addresses derived from this new seed. Simply moving the old, potentially compromised seed to a new device is not sufficient.

cryptonews.ru1 saat önce

Attention, Bitcoin Users! Today's Hack May Be Larger Than You Think. Here's What to Do

cryptonews.ru1 saat önce

Bitcoin in August: Experts Expect Range Testing, Not a Quick Reversal

Experts anticipate Bitcoin will remain under pressure in August, lacking momentum for a sustained rally after a partial July recovery. The price, trading around $63.5k, is seen stuck in a $60-65k range. Analysts cite a challenging macro environment of high U.S. rates, persistent inflation, and a strong dollar as key headwinds, alongside record ETF outflows. Historically, August is a weak month for crypto. Experts outline three main scenarios: a base case of sideways movement between $58-68k (50% probability), a bearish drop to $50-55k (30%), or a bullish push toward $71-75k (20%). Key levels to watch are support at $60-61k and resistance at $67k. While some see current prices as attractive for long-term accumulation, most warn of potential short-term downside, with a retest of $60k or even a fall toward $53k possible. A decisive market turnaround is not expected before Q4, making August a month for testing key levels rather than a major breakout.

cryptonews.ru1 saat önce

Bitcoin in August: Experts Expect Range Testing, Not a Quick Reversal

cryptonews.ru1 saat önce

Coldcard Hardware Wallet Hacked: 594 Bitcoin Withdrawn in 25 Minutes

The Coldcard hardware wallet has been compromised, with hackers stealing approximately 594.5 Bitcoin (~$40 million) from 500 addresses in just 25 minutes. The root cause was a critical software bug, undetected for five years, which disabled the device's secure chip for generating true random numbers. This led to the creation of private keys based on predictable data like the processor's serial number, drastically reducing cryptographic security. The attackers exploited this offline by brute-forcing possible seed phrases, finding active addresses on the public ledger, and signing transactions. Initially, Coinkite (Coldcard's maker) claimed only older models were at risk but later admitted all devices running the compromised firmware were vulnerable. CEO Rodolphe Novak (NVK) apologized but ruled out financial compensation for affected users. To secure funds, owners must urgently update their firmware to specific safe versions, generate a completely new seed phrase on the updated device, and transfer all assets to new addresses created with that new seed. While a BIP-39 passphrase can help, it does not replace this migration process. Other Coinkite products like TAPSIGNER were not affected. This incident underscores that even specialized hardware requires rigorous, independent code audits, especially for cryptographic functions. It parallels past failures, like a 2006 OpenSSL bug in Debian, and raises questions about whether automated code analysis can ever fully replace human scrutiny in critical security areas.

cryptonews.ru1 saat önce

Coldcard Hardware Wallet Hacked: 594 Bitcoin Withdrawn in 25 Minutes

cryptonews.ru1 saat önce

Tether (USDT) Publishes Anticipated Financial Results for the Second Quarter! Here's Its Current Status and Assets

Tether, the world's largest stablecoin issuer, has published its Q2 2026 financial results. According to an independent audit by BDO, the company reported a net operating profit of approximately $1.5 billion and an excess of assets over liabilities totaling $4.11 billion. As of June 30, 2026, the circulating supply of USDT was roughly $184.6 billion, marking an increase of about $446 million from the prior quarter. Tether now holds over 60% of the global stablecoin market share. The $1.5 billion profit was primarily generated from U.S. Treasury bills and repurchase agreements. Total assets stood at approximately $187.75 billion against liabilities of $183.64 billion, with $183.62 billion of liabilities tied to issued digital tokens. Key actions during the quarter included a reduction of secured loans by $2.38 billion (down 15%) and an addition of 14 tons to its physical gold holdings, bringing the total to over 146 tons. CEO Paolo Ardoino reaffirmed that USDT remains fully backed by reserves despite market volatility. He also noted that the company is undergoing a comprehensive independent audit with one of the "Big Four" accounting firms.

cryptonews.ru2 saat önce

Tether (USDT) Publishes Anticipated Financial Results for the Second Quarter! Here's Its Current Status and Assets

cryptonews.ru2 saat önce

Circle Reaches Major Regulatory Milestone, Receives Trust Charter from New York Department of Financial Services (NYDFS)

Circle, a financial services and stablecoin company, announced it reached a key regulatory milestone by receiving a Limited Purpose Trust Charter from the New York State Department of Financial Services (NYDFS). This charter allows Circle to expand its operations in New York to include asset custody services, issuance of NYDFS-approved stablecoins, and management of the reserves backing them. The approval positions Circle's USDC stablecoin within a regulated framework and follows the company's earlier receipt of a national trust bank charter from the U.S. OCC. CEO Jeremy Allaire stated this achievement reflects over a decade of compliance commitment and aligns with NYDFS's high standards, comparable to those for full commercial banks, as digital dollars become central to the global financial system.

cryptonews.ru2 saat önce

Circle Reaches Major Regulatory Milestone, Receives Trust Charter from New York Department of Financial Services (NYDFS)

cryptonews.ru2 saat önce

İşlemler

Spot

Popüler Makaleler

CORE Nasıl Satın Alınır

HTX.com’a hoş geldiniz! CORE (CORE) satın alma işlemlerini basit ve kullanışlı bir hâle getirdik. Adım adım açıkladığımız rehberimizi takip ederek kripto yolculuğunuza başlayın. 1. Adım: HTX Hesabınızı OluşturunHTX'te ücretsiz bir hesap açmak için e-posta adresinizi veya telefon numaranızı kullanın. Sorunsuzca kaydolun ve tüm özelliklerin kilidini açın. Hesabımı Aç2. Adım: Kripto Satın Al Bölümüne Gidin ve Ödeme Yönteminizi SeçinKredi/Banka Kartı: Visa veya Mastercard'ınızı kullanarak anında CORE (CORE) satın alın.Bakiye: Sorunsuz bir şekilde işlem yapmak için HTX hesap bakiyenizdeki fonları kullanın.Üçüncü Taraflar: Kullanımı kolaylaştırmak için Google Pay ve Apple Pay gibi popüler ödeme yöntemlerini ekledik.P2P: HTX'teki diğer kullanıcılarla doğrudan işlem yapın.Borsa Dışı (OTC): Yatırımcılar için kişiye özel hizmetler ve rekabetçi döviz kurları sunuyoruz.3. Adım: CORE (CORE) Varlıklarınızı SaklayınCORE (CORE) satın aldıktan sonra HTX hesabınızda saklayın. Alternatif olarak, blok zinciri transferi yoluyla başka bir yere gönderebilir veya diğer kripto para birimlerini takas etmek için kullanabilirsiniz.4. Adım: CORE (CORE) Varlıklarınızla İşlem YapınHTX'in spot piyasasında CORE (CORE) ile kolayca işlemler yapın.Hesabınıza erişin, işlem çiftinizi seçin, işlemlerinizi gerçekleştirin ve gerçek zamanlı olarak izleyin. Hem yeni başlayanlar hem de deneyimli yatırımcılar için kullanıcı dostu bir deneyim sunuyoruz.

390 Toplam GörüntülenmeYayınlanma 2024.12.13Güncellenme 2026.06.02

Tartışmalar

HTX Topluluğuna hoş geldiniz. Burada, en son platform gelişmeleri hakkında bilgi sahibi olabilir ve profesyonel piyasa görüşlerine erişebilirsiniz. Kullanıcıların CORE (CORE) fiyatı hakkındaki görüşleri aşağıda sunulmaktadır.