Allbridge Pauses Cross-Chain Protocol After $1.65M Flash Loan Attack

What happened

Allbridge, a decentralized cross-chain bridge protocol, has temporarily suspended its services after suffering a $1.65 million loss due to a flash loan attack. The attacker exploited the protocol's liquidity pools on the Solana blockchain, specifically targeting stablecoin pools. By using a flash loan, the attacker distorted the pool balances, enabling them to withdraw an inflated amount of assets. Subsequently, the stolen funds were moved across chains to Ethereum.

Security firms monitoring the incident confirmed the attack vector involved manipulating liquidity on Solana before bridging the proceeds to Ethereum, highlighting vulnerabilities in cross-chain liquidity management.

Context

Cross-chain bridges like Allbridge facilitate the transfer of tokens between different blockchain networks, such as Solana and Ethereum. These bridges are critical infrastructure in decentralized finance (DeFi), enabling interoperability and liquidity flow across ecosystems.

Flash loans are a type of uncollateralized loan that must be repaid within a single transaction block. While they enable innovative financial strategies, flash loans can also be exploited to manipulate on-chain protocols if safeguards are insufficient.

Allbridge's protocol supports stablecoins on Solana, which are pegged to fiat currencies and widely used for trading and liquidity. The attack exploited the stablecoin pools' pricing mechanisms, allowing the attacker to withdraw more value than legitimately held.

Why it matters

This incident underscores ongoing security challenges in DeFi, particularly for cross-chain bridges that handle large volumes of assets across multiple blockchains. The complexity of managing liquidity and price oracles across chains creates attack surfaces that can be exploited by sophisticated actors.

The $1.65 million loss, while significant, is part of a broader pattern of flash loan attacks targeting DeFi protocols. Such exploits can undermine user confidence and highlight the need for improved security audits, real-time monitoring, and robust economic safeguards.

Moreover, the attack involved both Solana and Ethereum, two of the largest blockchain ecosystems, emphasizing that vulnerabilities in one chain's liquidity pools can have cascading effects across the DeFi landscape.

What to watch next

Allbridge's development team is expected to conduct a thorough investigation and implement patches to prevent similar exploits. Users should monitor official Allbridge communications for updates on the protocol's status and security enhancements.

The broader DeFi community will likely scrutinize this attack to identify lessons and improve cross-chain bridge security standards. Regulatory bodies and security firms may increase focus on flash loan risks and cross-chain vulnerabilities.

Investors and users should stay informed about ongoing audits and potential insurance mechanisms that protocols might adopt to mitigate future losses.

Source

This report is based on information from Decrypt, published on July 20, 2026. For more details, see [Allbridge Pauses Cross-Chain Protocol After $1.65M Flash Loan Attack](https://decrypt.co/373831/allbridge-pauses-cross-chain-protocol-after-1-65m-flash-loan-attack).