Allbridge Core Suffers 2nd Flash Loan Exploit, Loses $1.65M on Solana

Allbridge Core paused after a $1.65M exploit on Solana, its second flash loan attack, as cross-chain bridges face a wave of at least 6 hacks since May 2026.

Crypto Security News

A cross-chain stablecoin bridge lost $1.65 million on July 19 after an attacker manipulated its exchange rate through a series of rapid swaps, marking the second time the protocol has fallen victim to a flash loan exploit. Allbridge Core, which connects multiple blockchains for stablecoin transfers, paused operations on its Solana deployment after the breach was flagged by multiple blockchain security firms.

The attacker opened the exploit by borrowing $1.12 million in USD Coin (USDC) from Kamino, a liquidity protocol running on Solana. The loan allowed the attacker to execute large, rapid swaps between USDC and Tether (USDT), pushing the exchange rate inside Allbridge Core's

pool far out of balance.

With the rate skewed in their favor, the attacker withdrew liquidity at the manipulated prices, repaid the $1.12 million flash loan, and kept the difference. Blockchain security firms PeckShield and CertiK confirmed that the stolen assets were subsequently bridged from Solana to Ethereum and moved through privacy pools to hide their origin.