Allbridge Forged CCTP Message Exploit
An attacker fed Allbridge's Base router a forged Circle CCTP message and padded it with an Aave flash loan to drain about $190,000 in USDC that a real deposit had just credited.
Loss
191.2K
USD
An archive of cryptocurrency security incidents — hacks, exploits, bridge failures and rug pulls, documented with on-chain evidence.
An attacker fed Allbridge's Base router a forged Circle CCTP message and padded it with an Aave flash loan to drain about $190,000 in USDC that a real deposit had just credited.
A flash-loan attack skewed Allbridge Core's stablecoin pool ratio on Solana, letting the attacker withdraw liquidity at manipulated rates for about $1.65 million.