The Allbridge incident wasn’t a black-swan mystery. It looked like a textbook pool manipulation play powered by a flash loan, executed quickly on Solana, and routed across chains before alarms could fully catch up.
We’re going to walk through what actually happened, how the attacker bent a stable pool out of shape, where the funds went, and what controls likely would have blunted it. No scare tactics. Just the mechanics and the fixes.
If you build, you’ll get a checklist. If you’re a user, you’ll see what to watch for the next time a bridge or pool starts behaving oddly.
Point
Details
Protocol pause and loss
Allbridge Core paused on July 19, 2026 after about $1.65 million left its Solana pools, according to multiple security firms and industry reporting The Block.
Attack path
An attacker used a roughly $1.12 million USDC flash loan from Kamino, then cycled USDC↔USDT swaps to skew Allbridge pool ratios before withdrawals The Block.
Cross-chain exit
Funds were br
We współpracy z: https://cryptodaily.co.uk/2026/07/allbridge-flash-loan-exploit-pool-manipulation
