Core

Solana

Flash

Lens

Allbridge

<h2 id="span-allbridge-core-exploit-news-flash-loan-attack-drains-1-65m-funds-br-span">Allbridge Core Exploit News: Flash Loan Attack Drains $1.65M Funds </h2>Allbridge Core Exploit&nbsp;on Solana after an attacker walked away with somewhere between $1.1 million and $1.65 million in a single, tightly engineered transaction.&nbsp;For liquidity providers still sitting in the affected pools, every hour of delay could mean a bigger hit to their deposits.&nbsp;Here's what actually happened inside that transaction — and why the exploiter's next move on Ethereum matters just as much as the attack itself.<h3 id="span-u-span-allbridge-core-suffers-security-incident-on-solana-span-u-span">Allbridge Core Suffers Security Incident on Solana</h3>Protocol Paused as Investigation Begins Allbridge Core Exploit&nbsp;confirmed a security incident affecting its protocol and paused operations as a precaution while its team investigates. The project has not yet published a full post-mortem, but it moved quickly to limit further damage once the exploit was detected.Liquidity providers with funds in the affected pools have been urged to withdraw immediately. Allbridge Core&nbsp;has not given a timeline for when — or whether — it&nbsp;will resume normal operations.Allbridge Requests Arbitrage Traders to Return Funds The pool imbalance created by the attack briefly opened a profitable arbitrage window for unrelated traders. It&nbsp;has publicly asked anyone who captured that profit to voluntarily send it back, sharing a dedicated wallet address for the purpose.The team says any returned funds will go directly toward compensating liquidity providers who lost money in the exploit. It's a goodwill appeal rather than a guaranteed recovery mechanism — whether traders comply remains to be seen.<img alt="Allbridge Core Crypto Hack Today on Solana" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/ihwvLTo32v6d9UHqVFA7ErROEzgxUoasXTj0x5jF.jpg" width="300" title="Allbridge Core Crypto Hack Today on Solana">Source: <a href="https://x.com/Allbridge_io/status/2078932561036722319" class="f-link" rel="noopener noreferrer nofollow">Official AllBridgeCore X</a><h4>How the Allbridge Exploit Happened</h4>Flash Loan Attack Explained On-chain investigators at Onchain Lens traced the <a href="https://www.coingabbar.com/en/crypto-currency-news/ostium-hack-2026-oracle-exploit-defi-24m-usdc-arbitrum" class="f-link" rel="noopener noreferrer nofollow">crypto hack news&nbsp;today</a>&nbsp;to a classic flash loan playbook, executed entirely within one transaction:<ul><li>The attacker borrowed $1.12 million in USDC through a Kamino Finance flash loan.</li><li>Rapid USDC-to-USDT swaps distorted the ratio inside Allbridge's stablecoin pool.</li><li>Liquidity was withdrawn at the now-skewed, favorable exchange rate.</li><li>The flash loan was repaid in full within the same transaction.</li><li>Roughly $1.1 million was extracted as profit.</li></ul>Largest Transaction During the Attack The single largest withdrawal tied to the hack&nbsp;reportedly reached $2.24 million in USDC. Onchain Lens identified the attacker's Solana wallet and is continuing to track its activity as the investigation develops.Proprietary Angle: Attack Timeline ReconstructionThe attack was not a direct bridge drain but a liquidity manipulation exploit. The attacker first targeted the pricing mechanism inside Allbridge’s stablecoin pool, using temporary capital from a flash loan to create an artificial imbalance before withdrawing funds at distorted rates. This shows that DeFi protocols can face risks not only from smart contract bugs but also from pool pricing weaknesses.<img alt="Allbridge Hack: $1.65M Crypto Attack on Solana Explained" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/IKya3w3MBMYmzqxbzviwmOnv3mPk9122pqsVbNwl.jpg" width="300" title="Allbridge Hack: $1.65M Crypto Attack on Solana Explained">Source: <a href="https://x.com/PeckShieldAlert/status/2079011150713561173" class="f-link" rel="noopener noreferrer nofollow">PeckshieldAlert X</a><h4>Loss Estimates Differ Between Blockchain Security Firms</h4>Onchain Lens Assessment Onchain Lens puts direct losses from the <a href="https://www.coingabbar.com/en/crypto-currency-news/across-protocol-solana-attack-restored-within-hours-news" class="f-link" rel="noopener noreferrer nofollow">Solana-based exploit</a>&nbsp;at more than $1.1 million, with the stolen assets later routed through privacy protocols to obscure their trail.PeckShield Findings PeckShield's monitoring puts the total exploit impact closer to $1.65 million and confirms the attacker bridged the stolen funds from Solana over to Ethereum shortly after the attack. Security researchers from both firms are continuing to track the funds.<img alt="Allbridge Core Attack Explained: Flash Loan Hack Hits DeFi" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/9e4HwWT7ukLsz3lYp5jNtimNg7kEJ9yxlwmIeEDt.jpg" width="300" title="Allbridge Core Attack Explained: Flash Loan Hack Hits DeFi">Source: Onchain Lens X<h4>Where Did the Stolen Funds Go?</h4>Assets Bridged to Ethereum PeckShield's on-chain data shows the exploiter moved the stolen assets across chains, converting the <a href="https://www.coingabbar.com/en/crypto-currency-news/latest-crypto-hack-news-defituna-exploit-drains-dollar580k" class="f-link" rel="noopener noreferrer nofollow">Solana-based Defi&nbsp;haul</a> into funds now sitting on Ethereum.Funds Mixed Through Privacy Protocols Onchain Lens reports the stolen funds were also passed through privacy protocols. That step makes the money considerably harder to trace and significantly lowers the odds of a clean recovery.<h4>Official Response From Allbridge</h4><ul><li>Emergency Measures Taken:&nbsp;Allbridge paused Core, opened an internal investigation, and is actively monitoring the affected pools for further irregular activity.</li><li>Guidance for Liquidity Providers:&nbsp;Affected LPs are being told to withdraw their liquidity now and hold off on redepositing until Allbridge issues further official updates.</li><li>Compensation Efforts:&nbsp;The team's public appeal for arbitrage profits to be returned is aimed squarely at making affected LPs whole, though there's no formal compensation plan confirmed yet.</li></ul><img alt="Allbridge Core Price Today" src="https://d3iuzwoiyg9qa8.cloudfront.net/webadmin/storage/public/commonEditerImage/jDRDLsAl6nuKaNfNJB7bQZntsIar3Qq2XUSKDXUm.jpg" width="300" title="Allbridge Core Price Today">Source; CoinMarketCap Data<h4>What the Allbridge Hack Means for Liquidity Providers</h4>LPs Face More Than Just Smart Contract Risks The incident highlights several risks for liquidity providers beyond traditional bridge security concerns:<ul><li>Pool pricing risk: Even if a bridge contract remains active, manipulated asset ratios can create losses for LPs.</li><li>Temporary imbalance risk: Large traders or attackers can exploit sudden price differences before protocols react.</li><li>Withdrawal timing risk: LPs who remain in affected pools during an incident may face increased exposure.</li></ul><ul><li>Recovery uncertainty: Compensation depends on recovered funds, returned arbitrage profits, or protocol treasury support.</li></ul>Why LP Monitoring Is Becoming More Important? The Allbridge core exploit&nbsp;incident shows that liquidity providers need to monitor:<ul><li>Emergency announcements from protocols.</li><li>Sudden pool ratio changes.</li><li>Large flash loan activity.</li><li>Unusual liquidity withdrawals.</li></ul><h4>What Happens Next?</h4>Allbridge exploit&nbsp;investigation is ongoing, and a formal post-mortem report is likely once the team has a complete picture. Traders and LPs should watch for potential smart contract fixes, protocol upgrades, updates on fund recovery, and any concrete compensation plan for affected liquidity providers.<h4>Conclusion</h4>Allbridge Core exploit&nbsp;by a <a href="https://www.coingabbar.com/en/crypto-currency-news/venus-protocol-exploit-the-flash-loan-attack-explained" class="f-link" rel="noopener noreferrer nofollow">flash loan exploit</a> on Solana, with losses estimated between $1.1 million and $1.65 million, depending on the security firm. The attacker manipulated the platform's stablecoin pool ratio using a Kamino flash loan, withdrew liquidity at distorted rates, and has since bridged the funds to Ethereum before mixing them through privacy protocols.&nbsp;Allbridge has paused Core, urged LPs to withdraw, and appealed for arbitrage profits to be returned as its investigation continues. For now, affected users should follow Allbridge's official channels closely while the team works toward mitigation and possible recovery.Disclaimer: This article is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency investments carry significant risk, including exploits, hacks, and total loss of funds. Readers should conduct their own research and consult a qualified financial advisor before making any investment decisions. CoinGabbar is not responsible for any losses incurred from acting on information in this article.

Allbridge Core Exploit on Solana Today: Full 1.65M Crypto Hack Details

Table of Contents

Coingabbar

Other articles published on Jul 20, 2026

Strategy raises $263.5M through MSTR sales, holds 843,775 Bitcoin

Hyperliquid Unveils Permissionless Outcome Markets

Pi is green on a red day

India Crypto News: Monsoon Session, Parliament Table VDA Report?

British Pound Climbs to 1.3465 as USD Weakens, UK Awaits New Prime Minister

Euro Holds Upside Bias Against US Dollar as Key Support Levels Remain Intact, UOB Reports

Join our free newsletter for daily crypto updates!