Allbridge Pauses Protocol After $1.65M Exploit Drains Stablecoin Liquidity Pools

Cross-chain stablecoin bridge, Allbridge Core, suffered a safety exploit that resulted in losses of roughly $1.65 million, based on blockchain safety agency PeckShield.

The agency mentioned the attacker has already bridged the stolen funds from Solana to Ethereum.

Allbridge Responds

Allbridge confirmed experiencing a safety incident and that the protocol has been paused as a precaution whereas the group investigates. The challenge additionally urged customers with liquidity in affected swimming pools to withdraw their funds instantly.

According to Allbridge, the exploit created a brief optimistic arbitrage alternative resulting from an imbalance within the affected liquidity swimming pools. The group requested anybody who profited from the arbitrage to voluntarily return the funds, whereas including that they might be used to compensate affected liquidity suppliers.

Meanwhile, blockchain safety agency Onchain Labs explained that the exploit started with a $1.12 million USDC flash mortgage obtained from Kamino on Solana. The attacker allegedly used speedy USDC and USDT swaps to govern Allbridge Core’s stablecoin pool ratios earlier than withdrawing liquidity at distorted charges, repaying the flash mortgage throughout the identical transaction, and extracting the funds. Onchain Labs added that the stolen belongings had been later moved via privateness protocols for mixing.

Allbridge has confronted an analogous assault earlier than. In April 2023, the protocol lost round $573,000 in a flash mortgage exploit on BNB Chain. The attacker took benefit of a bug within the good contract to govern token swap costs, which allowed them to steal about $289,900 in BUSD and $290,900 in USDT.

A String of Bridge Exploits

Cross-chain bridges stay a favourite goal for hackers. In April, Syndicate Labs lost about $330,000 value of SYND tokens after a leaked non-public key let an attacker take management of its Commons bridge contracts.

A month later, the Verus-Ethereum bridge was exploited for greater than $11 million as a result of certainly one of its contracts did not validate transactions correctly, though many of the funds had been later returned.

In June, the Ethereum Layer 2 community Taiko advised customers to drag their belongings from its bridges after attackers stole $1.7 million from certainly one of its bridge protocols.

The publish Allbridge Pauses Protocol After $1.65M Exploit Drains Stablecoin Liquidity Pools appeared first on CryptoPotato.