Allbridge pauses cross-chain protocol after $1.65M flash loan attack that exploited Solana stablecoin pools.
Security & Exploits ·
Allbridge paused its cross-chain protocol after a $1.65M exploit on July 19, 2026 involving a flash loan attack against Solana stablecoin pools. The team sent an on-chain message to a wallet believed connected to the incident, offering a white-hat settlement: the address could retain 20% of the stolen funds as a bounty in exchange for returning 80% within 48 hours, with no legal pursuit or law enforcement involvement following recovery.
The settlement proposal represents an alternative to full enforcement. If the wallet does not comply within the stated timeframe, Allbridge indicated it will escalate to comprehensive blockchain forensics, exchange notifications, and law enforcement referral. The message was transmitted from one Ethereum address to another on mainnet, creating a documented record of both the offer and the team's terms.
What remains unclear is whether the wallet holder will respond to the settlement offer, the underlying vulnerability that enabled the flash loan attack, or whether Allbridge has already commenced enforcement steps given no public confirmation of recovery has been disclosed.