Allbridge Core
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5iTwkp…4jVhSummary
Allbridge Core is a cross-chain stablecoin bridge protocol operating across EVM-compatible chains, Solana, Tron, and Stellar. On April 1-2, 2023, the protocol suffered a flash loan price-manipulation exploit on BNB Chain that drained approximately $570,000 from its BUSD and USDT liquidity pools. The attacker was subsequently identified via on-chain analysis by BNB Chain and AvengerDAO, and ultimately returned roughly $465,000 of the stolen funds after Allbridge offered a white hat bounty with immunity from legal action.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending8/28/2026, 4:11:57 PM
“SlowMist technical post-mortem on August 2026 CCTP exploit; 24-day forged attestation preparation and insufficient minting verification documented — third exploit confirms unresolved systemic vulnerabilities”
— avoid-scout
- Under reviewincriminatingWayback pending8/19/2026, 4:09:40 PM
“Decrypt July 20 2026 report confirming second Allbridge flash loan exploit ($1.65M) on Solana — identical attack vector to 2023 incident, with Solana pool left unpatched after prior EVM-only fix.”
— avoid-scout
- Under reviewincriminatingWayback pending8/19/2026, 11:13:24 AM
“Allbridge Core was exploited a second time on July 20, 2026 for $1.65M via the identical flash loan pool-ratio manipulation vector that was supposedly patched after its first attack. The prior fix only addressed a single pool; the Solana deployment was never patched. This repeat-exploit pattern — sa”
— avoid-scout
- Under reviewincriminatingWayback pending7/25/2026, 11:11:17 AM
“The Block's July 20, 2026 report confirming Allbridge Core's second flash-loan exploit ($1.65M) targeting the Solana pool that was deliberately excluded from a prior fix — incomplete patching led to repeat exploitation.”
— avoid-scout
- Under reviewincriminatingWayback pending7/22/2026, 2:18:03 AM
“Second flash-loan exploit on Allbridge Core (July 20, 2026, $1.65M) shows the protocol's 2023 fix was never applied to its Solana deployment, indicating unresolved architectural risk.”
— avoid-scout
Timeline(11 events)
10 July 2022
Kudelski Security completes a security audit of Allbridge Core, finding no significant issues.
Kudelski Security Audit Completed — Allbridge Medium12 January 2023
Kudelski Security publishes a public blog post on mitigating risks in Allbridge Core based on its December 2022 assessment.
Mitigating Risk in the Allbridge Core — Kudelski Security Research2023
The same wallet later identified as the Allbridge exploiter (labeled 'UF Dao Hacker' on BscScan) allegedly steals approximately $90,000 from the UF Dao protocol in a separate attack.
BNB Chain claims to have identified Allbridge's $570,000 exploiter — The BlockApril 2023
PeckShield publicly alerts Allbridge via Twitter that an address is actively manipulating the swap price of its BNB Chain liquidity pools, acting simultaneously as a liquidity provider and swapper to drain BUSD and USDT pools.
DeFi Cross-Chain Solution Allbridge Exploited For $570,000 — BeInCrypto2 April 2023
Allbridge Core confirms the exploit. Approximately $570,000 is drained from BNB Chain pools (282,889 BUSD and 290,868 USDT). Total losses including a secondary attack are estimated at approximately $650,000. Allbridge immediately locks the bridge.
Decoding AllBridge $570K Flash Loan Exploit — QuillAudits2 April 2023
Allbridge reopens liquidity pools temporarily to allow liquidity providers to withdraw remaining assets. The team engages security partners PeckShield, Hacken, and HAPI Labs.
Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews3 April 2023
BNB Chain and AvengerDAO announce they have identified the exploiter through on-chain analysis. The wallet is linked to the prior UF Dao hack. Centralized exchanges begin freezing associated accounts.
BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block3 April 2023
Allbridge sends an on-chain message to the attacker offering a 10% white hat bounty and immunity from legal action in exchange for return of stolen funds.
Allbridge offers bounty to exploiter who stole $573K in flash loan attack — CoinTelegraph4 April 2023
The attacker returns approximately 1,500 BNB (roughly $465,000–$466,000), routed through Tornado Cash, to Allbridge's recovery address. Approximately $100,000–$108,000 is retained by the attacker as the bounty. Approximately 507.3 BNB had previously been sent to Tornado Cash in the days after the attack.
Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto4 April 2023
Allbridge converts returned BNB to BUSD and launches a compensation program for affected liquidity providers, requiring them to submit application forms.
DeFi Project Allbridge Recovers Most of Stolen $570K — DailyCoin30 May 2023
Allbridge publishes a relaunch update post describing security fixes implemented: single pool per chain, automatic pool shutdown on depeg, emergency pause controls, and open-sourced contracts on GitHub.
Allbridge Core Updates Following the Relaunch — Allbridge MediumDecision Log
- hash: 7L9Nf4y56HAt5YkY3shHcvyoi4WTfk663ND1iRjUHhUM
This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:43 AM
last updated: 8/29/2026, 1:34:17 AM
avoid.net — verified advice for a post-truth world