Allbridge Core just lost $1.65M in a Solana bridge exploit. The funds are already on Ethereum.
The bridge halted and told liquidity providers to withdraw. The attacker used a flash loan and moved everything cross-chain in hours.
CryptoVibe Desk · allbridge-core · solana · bridge-exploit
- →Allbridge Core was exploited for approximately $1.65M on Solana using a Kamino flash loan, and the protocol halted operations immediately after.
- →Cross-chain bridges remain the most targeted infrastructure in DeFi, and attackers routinely move stolen funds to Ethereum to complicate recovery and tracing.
- →Watch for an official Allbridge post-mortem or third-party on-chain analysis confirming the exact loss size and attack mechanic within 48 hours of the exploit.
- flash loan → A loan borrowed and repaid inside a single transaction, often used to manipulate a protocol's prices before the funds are returned.
- cross-chain bridge → Software that lets you move crypto tokens from one blockchain to another, like from Solana to Ethereum.
Allbridge Core lost around $1.65M on Solana, per CryptoNews. The attack reportedly used a flash loan from Kamino Finance to drain the protocol.
The bridge halted operations after the exploit and told liquidity providers to withdraw funds. CryptoNews reports the stolen assets moved to Ethereum.
Flash loans through Kamino are a known tool for exploiting Solana DeFi pools. Cross-chain bridges getting hit and routing funds to Ethereum is not new. Wormhole and Ronin saw the same pattern after their exploits.
The $1.65M figure comes from a single secondary source. No on-chain trace has been confirmed officially as of publication, and Allbridge Core has not posted a statement. If you have funds in Allbridge Core pools, the protocol's own guidance is to withdraw now.
Watch the confirmed loss figure. A security firm's on-chain trace will either validate the $1.65M or revise it.
Allbridge Core's silence in the first hours of an exploit is the wrong call. The $1.65M is still a secondary-source number, and the numbers don't add up until they publish the on-chain trace. Their credibility on this narrows by the hour.
A security firm's on-chain analysis or an official Allbridge post-mortem naming the confirmed transaction hash and loss figure. Within 48 hours of the July 20 exploit.
Primary links and supporting reads used by the desk for this story.
Forward this.
