Allbridge Pauses Cross-Chain Protocol After $1.65M Flash Loan Attack

Allbridge Core is experiencing a security incident. We have paused the protocol as a precaution while we investigate.

If you have liquidity in affected pools, please withdraw now.

With the pools mispriced, the attacker swapped a few thousand dollars of USDT for about $2.24 million in USDC before bridging the proceeds to an Ethereum address and scattering them across others. It isn't clear how much remains within reach.

Allbridge's protocol remains paused, and how much of the $1.65 million can be clawed back will hinge on tracing the bridged funds—and on whether the arbitrage traders it appealed to actually send the money back.