Incident case

Allbridge Core 2026 Solana pool exploit

On July 19, 2026, Allbridge Core's Solana stablecoin liquidity pools were exploited. Allbridge confirmed that an attacker withdrew $1.65 million, paused Core during the investigation, and later relaunched Core without liquidity pools using CCTP and LayerZero transfer routes.

reviewedcurrent

Incident facts

Incident title
Allbridge Core 2026 Solana pool exploit
Bridge
Allbridge Core
Incident date
2026-07-19
Incident type
Exploit
Major incident
Yes
Affected chains
Solana
Affected assets
USDC, USDT
Attack category
Liquidity Or Accounting Failure
Reported loss
$1.65 million
Amount confidence
High
Loss amount basis
Reported By Project
Recovery
Unknown
Reimbursement
Unknown
Restart
Reopened
Current outcome
Active After Incident
Postmortem
Available
Resolution
Unresolved
Last reviewed
2026-08-10
Last verified
2026-08-10

Amount and valuation

Allbridge's official statement confirmed that an attacker withdrew $1.65 million from Allbridge Core liquidity pools; contemporaneous reporting located the affected USDC/USDT pools on Solana.

Use the first-party $1.65 million withdrawal figure as canonical. Secondary technical reporting is retained for chain, asset, and mechanism corroboration rather than used to increase the amount.

Why this remains unresolved

Timeline events

  • Allbridge Core Solana pool exploit disclosed2026-07-19

    Allbridge disclosed a security incident affecting Core, paused the protocol, told affected liquidity providers to withdraw, and subsequently confirmed that an attacker had withdrawn $1.65 million from Core liquidity pools.

    Exploit DisclosedHigh

    The later relaunch is represented at incident level in this batch because the first-party Telegram rendering proves reopening but does not expose an independently stable calendar date for a separate reopen event.

  • Allbridge Core relaunched without liquidity poolsApprox. 2026-07-20

    Allbridge reported that Core was back up using CCTP and LayerZero transfer routes without liquidity pools after the July 2026 Solana pool exploit and pause.

    Bridge ReopenedHigh

    Approximate day precision is preserved from the admitted first-party relaunch evidence; this event does not resolve attacker-fund recovery or LP reimbursement.

Evidence records

Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.

Known unknowns

Independent incident archive

Help maintain incident aftermath records

Support recovery, reimbursement, restart, migration, shutdown, evidence, and correction checks.

Support BIR
Record maintenance

Report a correction

Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.