Allbridge Suspends Cross-Chain Protocol Following $1.65 Million Attack

Allbridge Suspends Protocol Amid Security Breach

Allbridge, a cross-chain asset transfer platform, has temporarily paused its Core protocol following a significant security breach that resulted in a theft of around $1.65 million from its Solana liquidity pools. The incident involved an attacker who exploited a flash loan of $1.12 million to manipulate pricing within the liquidity pools, facilitating the extraction of assets that were subsequently bridged to Ethereum.

In light of the attack, Allbridge has recommended that liquidity providers withdraw their funds from the affected pools. The company has also requested that traders who profited from the resulting price imbalance return their earnings. "We have paused the protocol as a precaution while we investigate," Allbridge stated in a public update, highlighting the immediate need for caution.

"If you have liquidity in affected pools, please withdraw now," the team advised.

Details of the Attack

Security firm CertiK reported that the malicious transfer occurred before the assets were spread across various accounts, making recovery more complex. The exact status of the remaining funds is still unclear, but Allbridge is making efforts to track the bridged assets.

In an effort to address the financial impact on liquidity providers, Allbridge has indicated that returning stolen profits would assist in compensating those affected. The team stressed their commitment to recovering all lost funds.

Past Security Incidents

This attack marks the second major incident for Allbridge in recent months; a previous exploit in April 2023 led to a loss of approximately $573,000. At that time, the project managed to recover most of the stolen assets and implemented further security measures. The ongoing risks faced by cross-chain bridges are underscored by recent reports of significant hacks in the DeFi space, highlighting the need for enhanced security protocols as such platforms have become attractive targets for cybercriminals.