Skip to main content
Sign in

Allbridge

avoid.net/allbridge→28/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

Summary

Allbridge is a cross-chain bridging protocol founded in 2021 that operates Allbridge Classic and Allbridge Core, supporting stablecoin transfers across more than 20 blockchains. The protocol has suffered three separate security incidents since its launch: a $573K flash loan exploit on BNB Chain in April 2023, a $1.65M flash loan attack on its Solana deployment in July 2026, and a $191K CCTP router exploit on Base in August 2026 involving forged Circle attestation messages. The recurrence of similar vulnerability classes across deployments — and the failure to apply 2023 remediations to all active chains — raises systemic concerns about the protocol's security review and deployment practices.

Connected Entities

1 entities
Organizations
□Allbridge
Relationships
    Have evidence about Allbridge?

    Timeline(9 events)

    1 July 2021

    Allbridge (originally named Solbridge) launches, focused on connecting Solana to other blockchain networks.

    LI.FI Knowledge Hub — Allbridge Deep Dive

    1 June 2022

    Allbridge Core launches as a dedicated cross-chain stablecoin swap platform.

    LI.FI Knowledge Hub — Allbridge Deep Dive

    1 April 2023

    Allbridge Core's BNB Chain pools exploited for approximately $573K via flash loan price manipulation. Attacker drained ~$289,900 BUSD and ~$290,900 USDT.

    BitcoinWorld — Allbridge Exploit: Hacker Returns Majority Of $573K Stolen Funds

    3 April 2023

    Allbridge contacts attacker on-chain offering a white-hat bounty; attacker eventually returns approximately $465,000.

    Blockchain.news — Allbridge Recovers $465,000 Stolen in Crypto Exploit

    1 May 2023

    Allbridge publishes post-mortem committing to single-liquidity-pool-per-blockchain architecture and withdrawal caps to prevent flash loan attacks.

    CryptoNews — Allbridge Hack Response

    19 July 2026

    Allbridge Core's Solana deployment exploited for approximately $1.65M via flash loan attack using Kamino Finance. Same vulnerability class as 2023 BNB Chain incident; the Solana deployment was reportedly not updated with the 2023 remediation.

    CoinDesk — Cross-chain protocol Allbridge halts after $1.65 million flash loan exploit

    26 July 2026

    Attacker prepares August 2026 CCTP exploit by calling Circle's MessageTransmitterV2.sendMessage on Polygon, forging a CCTP message claiming a 1 million USDC transfer without any actual burn. Circle generates a valid attestation for the message.

    SlowMist — A Cross-Chain Attack Spanning One Month

    19 August 2026

    Attacker executes the CCTP exploit on Allbridge's Base Router, draining approximately $191,000 in USDC. Attack leverages the pre-forged Polygon attestation and an Aave flash loan. Root cause: missing sender-identity, message-origin, and mint-amount verification in the receiveCctpMessage function.

    KuCoin — SlowMist Reveals Allbridge Cross-Chain Bridge Attack Details

    1 August 2026

    SlowMist publishes detailed post-mortem of the August 2026 CCTP exploit, flagging systemic cross-chain verification failures and warning of potential for larger attacks on higher-liquidity deployments.

    SlowMist on Medium — A Cross-Chain Attack Spanning One Month
    Provenance & Audit Trail
    15 Wayback Archives

    Decision Log

    • #1publish⛓ pending8/30/2026, 5:10:35 PM
      hash: 8LNSJ88dC7vWWY89WVJ1feUYb34sd29Xr7GurxdPVoZX

    15 of 18 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 8/30/2026, 5:10:24 PM

    last updated: 9/1/2026, 12:55:59 PM

    avoid.net — verified advice for a post-truth world