Allbridge Core paused its cross-chain stablecoin bridge on Sunday after an attacker drained $1.65 million from its Solana deployment using a flash loan attack. According to Onchain Lens, the attacker borrowed $1.12 million USDC from Kamino, executed rapid USDC/USDT swaps to manipulate the pool's exchange rate, then withdrew liquidity at distorted rates and repaid the loan, pocketing the difference. The stolen funds were bridged from Solana to Ethereum and moved into privacy pools before Allbridge could respond. The protocol has urged liquidity providers in affected pools to withdraw immediately while it investigates.

This is at least the sixth bridge exploit since May, adding to a string that includes Taiko ($1.7 million), Secret Network ($4.67 million), Gravity Bridge, Verus Bridge, and Butter Network. The pattern reflects that bridges concentrate large stablecoin and cross-chain asset pools in single smart contracts, making them attractive targets. Each exploit is isolated to its own protocol, but the clustering suggests similar attack vectors—flash loan rate manipulation appears in multiple incidents. That raises bridge risk as a category, though no shared infrastructure has been compromised.

For traders, this does not create a systemic short on ETH or majors. Allbridge Core is a mid-tier protocol; the $1.65 million loss is contained and the attacker exited to privacy pools, not to sell pressure. Funding remains slightly positive at 0.3 basis points per 8 hours, above the 30-day average of 0.1bp, indicating no flight from leverage. Fear and Greed sits at 29, elevated from the 30-day average of 21 but still in fear territory. The bridge exploit wave matters for DeFi infrastructure credibility, but without contagion to shared collateral or oracles, it does not transmit into spot.

Watch for any disclosure that Allbridge Core pools were used as collateral in lending protocols or that the stablecoin imbalance created bad debt elsewhere. If that surfaces, reassess for a DeFi blue-chip short. Without it, this is noise in a sector already priced as risky. The specific signal: if another bridge exploit occurs within the next two weeks and involves a major protocol, that tips from isolated incidents to a systemic attack surface and warrants a position against DeFi exposure.

Source: CoinTelegraph