Cross-chain protocol Allbridge paused its Core product after a $1.65M exploit that used a Solana flash loan to warp its stablecoin pool ratios, then bridged the drained funds over to Ethereum.

No zero-day: the attacker took a $1.12M flash loan from Kamino, rapidly swapped USDC for USDT to skew the pool, withdrew at favorable rates, then laundered proceeds through privacy protocols. PeckShield, CertiK and Onchain Lens flagged the breach. Allbridge urged LPs to withdraw from affected pools and called on the arbitrageurs who profited to return the funds and make affected LPs whole again.