v7 → v8
Scores
trust_score0 → 0
severity_base— → —
score_modifier-8.96 → -16.96
Sections
Incident Overview
unchanged
Attack Mechanics
unchanged
Fund Movements and Attacker Addresses
unchanged
Prior 2023 Exploit and Incomplete Remediation
unchanged
Security Audit History and Post-Exploit Analysis
unchanged
Protocol Response and Recovery Efforts
unchanged
Broader Industry Context: Cross-Chain Bridge Vulnerabilities in 2026
unchanged
Risk Assessment
unchanged
Timeline events
No timeline changes.
Accepted submissions
- removedurlincriminating
{"url":"https://www.techtimes.com/articles/321044/20260720/allbridge-core-loses-165m-flash-loan-again-after-its-single-pool-fix-missed-solana.htm","kind":"url"}- removedurlincriminating
{"url":"https://www.coindesk.com/business/2026/07/20/cross-chain-protocol-allbridge-halts-after-usd1-65-million-flash-loan-exploit","kind":"url"}- removedurlincriminating
{"url":"https://www.theblock.co/post/408855/allbridge-core-exploit","title":"Allbridge Core — Second Flash Loan Exploit via Unpatched Solana Vector","summary":"On July 19-20, 2026, Allbridge Core suffered a $1.65M flash loan exploit on its Solana deployment — its second such attack following a $573K BNB Chain exploit in April 2023. The 2023 remediation only patched BNB Chain and was never applied to Solana, leaving an identical pool-pricing manipulation vector open for three years. The attacker used a $1.12M USDC flash loan from Kamino to distort pricing and extract $2.24M, then bridged to Ethereum and used privacy pools. This repeated-failure pattern with documented negligence in applying the prior fix is new evidence for the existing slug.","additional_urls":["https://www.techtimes.com/articles/321044/20260720/allbridge-core-loses-165m-flash-loan-again-after-its-single-pool-fix-missed-solana.htm","https://decrypt.co/373831/allbridge-pauses-cross-chain-protocol-after-1-65m-flash-loan-attack","https://en.cryptonomist.ch/2026/07/20/allbridge-flash-loan-attack/","https://cryptodaily.co.uk/2026/07/allbridge-flash-loan-exploit-pool-manipulation"]}- removedurlincriminating
{"url":"https://decrypt.co/373831/allbridge-pauses-cross-chain-protocol-after-1-65m-flash-loan-attack","kind":"url"}Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v7 hash: D2T1RWeDNJn2bsHa6oSPcfGJQVyCPZiqotVWWHuwFmRW
v8 hash: 6c1299361267cea7eab95051dfac12e878bd5b98c7f1212080bc96acd15f6368