₿ Crypto

Allbridge Halts After $1.65M Flash Loan Exploit Drains Cross-Chain Protocol

A $1.65 million flash loan exploit via Kamino forced cross-chain protocol Allbridge to halt, highlighting ongoing vulnerabilities in DeFi bridge security and the risks of manipulated liquidity pools. The attack involved a $1.12 million flash loan to distort pool ratios before bridging funds, marking another blow to multi-chain infrastructure.

📅 July 20, 2026 🕐 1 min read 📰 CoinDesk

3 assets impacted (Crypto). Net bias: 0 Bullish, 3 Bearish, 0 Neutral. Strongest signal: ABR/USD ↓ 7/10 (85% confidence).

📊 Affected Assets (3)

ABR/USD

Bearish 🤖 85%

📅 Short-term 🌍 Global · Explicit

Allbridge's native token ABR faces direct negative impact after the protocol halted operations due to a $1.65 million flash loan exploit. The attack undermines trust in the bridge's security and could lead to liquidity exodus, price decline.

Catalysts

▼ Flash loan exploit drains $1.65 million from Allbridge
▼ Protocol halt announced to contain damage

Risk Factors

▲ Swift recovery plan and compensation for users could restore confidence
▲ Successfully patching the vulnerability without further exploits might limit downside

▼ Show FAQ (3) ▲ Hide FAQ

How will the Allbridge exploit impact ABR token price?

The exploit and subsequent protocol halt likely trigger sell pressure as investors lose confidence, with ABR price potentially dropping until Allbridge outlines a recovery plan.

What should ABR holders do after the Allbridge halt?

Holders should monitor official communications for a post-mortem and compensation plan; without a clear recovery roadmap, the token faces significant short-term downside risk.

Is there any estimate of losses beyond the $1.65 million?

The article states the attacker drained $1.65 million, but further losses may emerge if other vulnerabilities exist. Allbridge's investigation will clarify the full extent.

KMNO/USD

Bearish 🤖 60%

📅 Short-term 🌍 Global · Explicit

Kamino's token KMNO may see negative sentiment despite the protocol being the flash loan source rather than the victim, as its lending mechanism was used in a high-profile exploit. This could raise concerns about Kamino's risk management and attract negative attention.

Catalysts

▼ Flash loan of $1.12 million taken from Kamino was used in an exploit
▼ Increased scrutiny on Kamino's lending parameters after the incident

Risk Factors

▲ Kamino's timely response and clarification that its protocol wasn't compromised could mitigate negative sentiment
▲ If the exploit is seen as Allbridge-specific, KMNO may decouple quickly

▼ Show FAQ (3) ▲ Hide FAQ

Why would Kamino's token be affected if it wasn't hacked?

KMNO may face selling pressure due to guilt by association — its flash loan facility was used to facilitate the Allbridge exploit, raising questions about risk controls.

Did the attacker borrow from Kamino directly and is Kamino at risk?

The attacker took a flash loan from Kamino, but since flash loans are repaid within the same transaction, Kamino itself did not lose funds. The concern is reputational and possible regulatory attention.

Should investors sell KMNO after this incident?

Not necessarily, as Kamino's core protocol remains secure. However, the token might see a short-term dip, making it a potential buy opportunity if fundamentals remain strong.

SOL/USD

Bearish 🤖 50%

📅 Short-term 🌍 Global ✨ Inferred

Solana's native token SOL could face negative sentiment as the exploit utilized Kamino, a leading Solana DeFi protocol, highlighting vulnerabilities within the Solana ecosystem. The flash loan attack may dent confidence in Solana-based DeFi, potentially triggering outflows from SOL.

Catalysts

▼ Flash loan exploit on Solana-based Kamino raises ecosystem security concerns
▼ Potential capital flight from Solana DeFi to safer networks

Risk Factors

▲ Solana's chain itself wasn't compromised; the exploit was at the application layer, which may not deter SOL holders
▲ Broader market momentum could overshadow this negative event

▼ Show FAQ (3) ▲ Hide FAQ

Why is Solana affected by an Allbridge exploit?

The exploit used a flash loan from Kamino, which runs on Solana. This highlights risks in Solana's DeFi landscape, potentially spooking investors and pressuring SOL price.

Is Solana's network security at risk?

No, the exploit was at the application level (Allbridge) and the lending protocol (Kamino), not the Solana blockchain itself. SOL's price may dip on sentiment but fundamentals remain unchanged.

Could this trigger a broader sell-off in Solana ecosystem tokens?

Possibly, as investors may de-risk from Solana DeFi projects, leading to short-term selling pressure on associated tokens.

🎯 Key Takeaways

An attacker exploited Allbridge with a $1.12 million flash loan from Kamino, manipulating pool ratios to drain $1.65 million.
The theft forced Allbridge to immediately halt operations to prevent further losses.
The incident highlights ongoing vulnerabilities in cross-chain bridge protocols despite improving DeFi security.
The use of a flash loan from Kamino underscores the risks of composability in DeFi, where exploits can cascade.
Investors in bridge tokens or related protocols may face short-term confidence shocks.
The exploit adds to a string of high-profile DeFi hacks in 2026, pressuring regulators to scrutinize bridge security.
Allbridge's response and recovery plan will be critical to restoring trust among users and liquidity providers.

📝 Executive Summary

The attacker used a $1.12 million flash loan from Kamino to manipulate pool ratios, enabling them to withdraw assets at favorable rates before bridging funds.

❓ FAQ

What exactly happened in the Allbridge exploit?

An attacker took a $1.12 million flash loan from Kamino to manipulate pool ratios on Allbridge, withdrawing assets at favorable rates before bridging the funds out, resulting in a total loss of $1.65 million.

Why are cross-chain bridges vulnerable to flash loan attacks?

Cross-chain bridges rely on liquidity pools and pricing mechanisms that can be temporarily manipulated by large, uncollateralized loans, allowing attackers to extract value before the pool rebalances.

What does this mean for DeFi security overall?

It demonstrates that despite audits and monitoring, innovative attack vectors like flash loan manipulation remain a persistent threat, especially for complex multi-chain infrastructure.

Allbridge Halts After $1.65M Flash Loan Exploit Drains Cross-Chain Protocol

📊 Affected Assets (3)

🎯 Key Takeaways

📝 Executive Summary

❓ FAQ

📰 Related Articles

🏷️ Tags

📰 Source