Skip to main content
AVOID.NET
Sign in

Allbridge Core

avoid.net/allbridge-core→42/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5iTwkp…4jVh

Summary

Allbridge Core is a cross-chain stablecoin bridge protocol operating across EVM-compatible chains, Solana, Tron, and Stellar. On April 1-2, 2023, the protocol suffered a flash loan price-manipulation exploit on BNB Chain that drained approximately $570,000 from its BUSD and USDT liquidity pools. The attacker was subsequently identified via on-chain analysis by BNB Chain and AvengerDAO, and ultimately returned roughly $465,000 of the stolen funds after Allbridge offered a white hat bounty with immunity from legal action.

Connected Entities

10 entities · 60 linked investigations
Organizations
□Polygon54□Ethereum□Allbridge Core□Avalanche□Stellar□Binance□Allbridge□Wormhole□Solana□ZachXBT
Relationships
  • Stellar→mentioned with→Ethereum(60%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • Allbridge→mentioned with→Ethereum(60%)
  • Allbridge→mentioned with→Solana(70%)
  • Allbridge Core→mentioned with→Avalanche(60%)
  • Allbridge Core→mentioned with→Solana(65%)
  • Allbridge→mentioned with→Polygon(70%)
  • Allbridge Core→mentioned with→ZachXBT(70%)
  • + 18 more
Also appears in
Polygon·54StableMagnet·2Shibarium·28JUDAO·18Shibarium Bridge·32Andean Medjedovic·2Ionic Money·14Allo Protocol·57AnubisDAO·2SushiSwap RouteProcessor Exploit·54+ 50 more

Connected Through

9 shared actors · 553 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Allbridge Core?
0
Accepted
5
Under review
0
Rejected / revoked

Community submissions

Timeline(11 events)

10 July 2022

Kudelski Security completes a security audit of Allbridge Core, finding no significant issues.

Kudelski Security Audit Completed — Allbridge Medium

12 January 2023

Kudelski Security publishes a public blog post on mitigating risks in Allbridge Core based on its December 2022 assessment.

Mitigating Risk in the Allbridge Core — Kudelski Security Research

2023

The same wallet later identified as the Allbridge exploiter (labeled 'UF Dao Hacker' on BscScan) allegedly steals approximately $90,000 from the UF Dao protocol in a separate attack.

BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block

April 2023

PeckShield publicly alerts Allbridge via Twitter that an address is actively manipulating the swap price of its BNB Chain liquidity pools, acting simultaneously as a liquidity provider and swapper to drain BUSD and USDT pools.

DeFi Cross-Chain Solution Allbridge Exploited For $570,000 — BeInCrypto

2 April 2023

Allbridge Core confirms the exploit. Approximately $570,000 is drained from BNB Chain pools (282,889 BUSD and 290,868 USDT). Total losses including a secondary attack are estimated at approximately $650,000. Allbridge immediately locks the bridge.

Decoding AllBridge $570K Flash Loan Exploit — QuillAudits

2 April 2023

Allbridge reopens liquidity pools temporarily to allow liquidity providers to withdraw remaining assets. The team engages security partners PeckShield, Hacken, and HAPI Labs.

Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews

3 April 2023

BNB Chain and AvengerDAO announce they have identified the exploiter through on-chain analysis. The wallet is linked to the prior UF Dao hack. Centralized exchanges begin freezing associated accounts.

BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block

3 April 2023

Allbridge sends an on-chain message to the attacker offering a 10% white hat bounty and immunity from legal action in exchange for return of stolen funds.

Allbridge offers bounty to exploiter who stole $573K in flash loan attack — CoinTelegraph

4 April 2023

The attacker returns approximately 1,500 BNB (roughly $465,000–$466,000), routed through Tornado Cash, to Allbridge's recovery address. Approximately $100,000–$108,000 is retained by the attacker as the bounty. Approximately 507.3 BNB had previously been sent to Tornado Cash in the days after the attack.

Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto

4 April 2023

Allbridge converts returned BNB to BUSD and launches a compensation program for affected liquidity providers, requiring them to submit application forms.

DeFi Project Allbridge Recovers Most of Stolen $570K — DailyCoin

30 May 2023

Allbridge publishes a relaunch update post describing security fixes implemented: single pool per chain, automatic pool shutdown on depeg, emergency pause controls, and open-sourced contracts on GitHub.

Allbridge Core Updates Following the Relaunch — Allbridge Medium
Provenance & Audit Trail
Anchored on SolanaVerify on-chain14 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 18 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-5

generated: 5/4/2026, 2:54:43 AM

last updated: 8/29/2026, 1:34:17 AM

5 views

avoid.net — verified advice for a post-truth world