Allbridge Core announced it has paused its cross-chain bridge following a security incident that resulted in the loss of $1.65 million from its Solana deployment, which occurred on Sunday.

The pause is the sixth attack on a cross-chain bridge since May, a trend that reflects the attractiveness of these platforms to attackers because they hold large pools of assets that back bridged tokens on destination blockchains.

According to a post on X, Allbridge said the protocol was paused as a precaution while it investigates; users with liquidity in the affected pools were advised to withdraw their assets immediately. On‑chain analysis indicated the attacker obtained a $1.12 million USDC flash loan from the Kamino platform, executed rapid USDC‑USDT swaps that distorted the stablecoin pool’s exchange rate, and then withdrew liquidity at manipulated rates, repaid the flash loan and retained the difference. The manipulation created a temporary arbitrage opportunity; the post asked participants who profited to consider returning the funds to help compensate affected liquidity providers.

The company has previously been targeted in a flash‑loan attack in April 2023 that drained $573,000 across the BNB Chain, and other recent bridge exploits include $1.7 million stolen from Taiko in June, a $4.67 million “infinite mint” attack on Secret Network, and attacks on Gravity Bridge, Verus Bridge and the Butter Network.

Allbridge has not disclosed the root cause of the current incident, and the timeline for resuming service remains unclear while the investigation proceeds.