On July 20, 2026, Allbridge Core on Solana was drained of $1.65M. An attacker used a 1.12M USDC flashloan through Kamino to swap USDC/USDT and distort the pool ratio, then withdrew liquidity at the inflated rate.

Cross-chain bridge protocol Allbridge Core was exploited on July 19-20, 2026. The attacker used a ~$1.12M USDC flash loan from Kamino to rapidly swap in the Solana USDC/USDT liquidity pools, manipulating ratios and draining approximately $1.65 million. The team paused the protocol, urged affected LPs to withdraw funds immediately, and asked arbitrage profiteers to return funds for LP compensation.