Allbridge's Flash Loan Attack: $1.65 Million Loss and Market Impact

Allbridge Core has paused its cross-chain stablecoin protocol after approximately $1.65 million worth of cryptocurrencies were stolen from its Solana liquidity pools. Security firms CertiK and PeckShield reported that an attacker used a $1.12 million flash loan from the Kamino lending protocol to rapidly swap USDC and USDT, manipulating the pools' internal ratios. The stolen assets were bridged to an Ethereum address and dispersed across additional addresses, though the amount remaining under the attacker's control is unclear.

Attack Technical Details

■The attacker used a flash loan taken and repaid within the same transaction to manipulate the liquidity pools.

■The pools created a temporary arbitrage opportunity, but Allbridge paused the protocol while investigating.

■A similar attack in 2023 drained $650,000 from BNB Chain pools.

Market Reaction

■CEX volumes rose for the first time in five months in June, with spot volumes climbing 15.3% to $1.11 trillion.

■RWA perpetual volumes surged to a record $311 billion.

Allbridge's security measures are raising concerns about the effectiveness of flash loan protections. More robust safeguards for cross-chain bridges, particularly against liquidity pool imbalances, may be necessary.