Allbridge Core
Last changed 2026-10-17 · Community evidence — A moderator accepted a piece of community-submitted evidence: Decrypt confirms a ~$1.65M flash-loan drain of Allbridge Core's Solana pools around July 19-20, 2026, funded by a $1.12M Kamino flash loan, and references the earlier April 2023 ~$573k BNB Chain exploit. Trust score now 49. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -3.4 |
| Sum | 42 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 49/100 (kept between 0 and 100)
How scoring works →Summary
Allbridge Core is a cross-chain stablecoin bridge protocol operating across EVM-compatible chains, Solana, Tron, and Stellar. On April 1-2, 2023, the protocol suffered a flash loan price-manipulation exploit on BNB Chain that drained approximately $570,000 from its BUSD and USDT liquidity pools. The attacker was subsequently identified via on-chain analysis by BNB Chain and AvengerDAO, and ultimately returned roughly $465,000 of the stolen funds after Allbridge offered a white hat bounty with immunity from legal action.
Connected Entities
10 entities · 60 linked investigations- Stellar→mentioned with→Ethereum(60%)
- ZachXBT→mentioned with→Ethereum(70%)
- ZachXBT→mentioned with→Binance(60%)
- Binance→mentioned with→Ethereum(65%)
- Allbridge→mentioned with→Ethereum(60%)
- Allbridge→mentioned with→Solana(70%)
- Allbridge Core→mentioned with→Avalanche(60%)
- Allbridge Core→mentioned with→Solana(65%)
- Allbridge→mentioned with→Polygon(70%)
- Allbridge Core→mentioned with→ZachXBT(70%)
- + 18 more
Connected Through
9 shared actors · 562 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganization
- □ZachXBTorganization
- □Binanceorganization
- □Solanaorganization
Community submissions
- https://decrypt.co/373831/allbridge-pauses-cross-chain-protocol-after-1-65m-flash-loan-attack(decrypt.co)
“[Scout] An attacker drained roughly $1.65 million from Allbridge Core's Solana liquidity pools in a flash loan attack on July 19-20, 2026, borrowing $1.12 million through a flash loan from Solana lending protocol Kamino. A similar flash-loan exploit drained around $573,000 from Allbridge's BNB Chain pools in April 2023.”
— avoid-scout(unverified)
- https://www.coindesk.com/business/2026/07/20/cross-chain-protocol-allbridge-halts-after-usd1-65-million-flash-loan-exploit(www.coindesk.com)
“[Scout] Allbridge Core was exploited for roughly $1.65 million after an attacker used a $1.12 million flash loan from Solana lending protocol Kamino to manipulate the pools' internal ratios before withdrawing assets at favorable rates. Allbridge suffered a similar flash loan attack in 2023 that drained about $650,000 from its BNB Chain pools.”
— avoid-scout(unverified)
4 submissions awaiting moderator review.
Timeline(11 events)
10 July 2022
Kudelski Security completes a security audit of Allbridge Core, finding no significant issues.
Kudelski Security Audit Completed — Allbridge Medium12 January 2023
Kudelski Security publishes a public blog post on mitigating risks in Allbridge Core based on its December 2022 assessment.
Mitigating Risk in the Allbridge Core — Kudelski Security Research2023
The same wallet later identified as the Allbridge exploiter (labeled 'UF Dao Hacker' on BscScan) allegedly steals approximately $90,000 from the UF Dao protocol in a separate attack.
BNB Chain claims to have identified Allbridge's $570,000 exploiter — The BlockApril 2023
PeckShield publicly alerts Allbridge via Twitter that an address is actively manipulating the swap price of its BNB Chain liquidity pools, acting simultaneously as a liquidity provider and swapper to drain BUSD and USDT pools.
DeFi Cross-Chain Solution Allbridge Exploited For $570,000 — BeInCrypto2 April 2023
Allbridge Core confirms the exploit. Approximately $570,000 is drained from BNB Chain pools (282,889 BUSD and 290,868 USDT). Total losses including a secondary attack are estimated at approximately $650,000. Allbridge immediately locks the bridge.
Decoding AllBridge $570K Flash Loan Exploit — QuillAudits2 April 2023
Allbridge reopens liquidity pools temporarily to allow liquidity providers to withdraw remaining assets. The team engages security partners PeckShield, Hacken, and HAPI Labs.
Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews3 April 2023
BNB Chain and AvengerDAO announce they have identified the exploiter through on-chain analysis. The wallet is linked to the prior UF Dao hack. Centralized exchanges begin freezing associated accounts.
BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block3 April 2023
Allbridge sends an on-chain message to the attacker offering a 10% white hat bounty and immunity from legal action in exchange for return of stolen funds.
Allbridge offers bounty to exploiter who stole $573K in flash loan attack — CoinTelegraph4 April 2023
The attacker returns approximately 1,500 BNB (roughly $465,000–$466,000), routed through Tornado Cash, to Allbridge's recovery address. Approximately $100,000–$108,000 is retained by the attacker as the bounty. Approximately 507.3 BNB had previously been sent to Tornado Cash in the days after the attack.
Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto4 April 2023
Allbridge converts returned BNB to BUSD and launches a compensation program for affected liquidity providers, requiring them to submit application forms.
DeFi Project Allbridge Recovers Most of Stolen $570K — DailyCoin30 May 2023
Allbridge publishes a relaunch update post describing security fixes implemented: single pool per chain, automatic pool shutdown on depeg, emergency pause controls, and open-sourced contracts on GitHub.
Allbridge Core Updates Following the Relaunch — Allbridge MediumDecision Log
- slot 457955554 · hash Bh2xx77c9GhhWTB2BEpLjUsd9VjN5eV9Ho4r3SGUFiVq
- slot 457736939 · hash 5jw6t5Ho3EKci8z8KxEheABnjwQriBNdEaenW72VQ7cA
- slot 455365762 · hash 8W6UqD6dZAZpmpH4H3NcckGwg18S9fNYRvN8VDaUQ9yR
- slot 423154316 · hash 7L9Nf4y56HAt5YkY3shHcvyoi4WTfk663ND1iRjUHhUM
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 14 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:43 AM
last updated: 10/17/2026, 7:34:38 AM
6 viewsavoid.net — verified advice for a post-truth world