{"id":76570,"date":"2023-04-02T14:31:08","date_gmt":"2023-04-02T11:31:08","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=76570"},"modified":"2025-09-10T18:07:28","modified_gmt":"2025-09-10T15:07:28","slug":"hacker-attacked-allbridges-liquidity-pools-developers-halt-cross-chain-bridge","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hacker-attacked-allbridges-liquidity-pools-developers-halt-cross-chain-bridge\/","title":{"rendered":"Hacker Attacked Allbridge&#8217;s Liquidity Pools; Developers Halt Cross-Chain Bridge"},"content":{"rendered":"<p>The Allbridge cross-chain bridge lost digital assets worth about $570,000 as a result of a hacker attack. An unknown actor manipulated the swap price to drain tokens from the pool on the BNB Chain, according to PeckShield analysts.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">The <a href=\"https:\/\/twitter.com\/Allbridge_io?ref_src=twsrc%5Etfw\">@Allbridge_io<\/a> hack results in the loss of ~$570K (282,889 BUSD + 290,868 USDT). The root cause appears to be the manipulation of pool\u2019s swap price. The actor plays dual roles of acting as LP and swapper to manipulate the price and then drain the pool funds. <a href=\"https:\/\/t.co\/JiPwVHsaCi\">https:\/\/t.co\/JiPwVHsaCi<\/a> <a href=\"https:\/\/t.co\/FY2wwA6IHm\">pic.twitter.com\/FY2wwA6IHm<\/a><\/p>\n<p>\u2014 PeckShield Inc. (@peckshield) <a href=\"https:\/\/twitter.com\/peckshield\/status\/1642356701100916736?ref_src=twsrc%5Etfw\">April 2, 2023<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Allbridge confirmed the existence of a problem on the BNB Chain, but did not comment on the magnitude of the damage. The team disabled the bridge during the investigation. <\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">We are investigating the current situation with the BNB Chain pools. <\/p>\n<p>The bridge has been temporarily shut down during the investigation. <\/p>\n<p>We apologize for the inconvenience.<\/p>\n<p>\u2014 Allbridge (@Allbridge_io) <a href=\"https:\/\/twitter.com\/Allbridge_io\/status\/1642341041410908164?ref_src=twsrc%5Etfw\">April 2, 2023<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>In a conversation with ForkLog, a project representative said that &#8220;Allbridge is preparing a statement and an action plan.&#8221; The company promised to provide a comment.<\/p>\n<div class=\"wp-block-text-wrappers-update-2 article_update\"><time class=\"gtb_text-wrappers_update_time\">April 2, 2023 | 16:45<\/time><span class=\"gtb_text-wrappers_update_head\">Update: <\/span><\/p>\n<p>The Allbridge team confirmed that the BUSD\/USDT liquidity pools on the BNB Chain were attacked. According to the statement, the company is preparing a plan to compensate affected users.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">2\/ The exploit targeted BUSD\/USDT pools on BNB Chain. This attack comes as a devastating blow to our team, but our main priority is to work on making it up for our community.<\/p>\n<p>\u2014 Allbridge (@Allbridge_io) <a href=\"https:\/\/twitter.com\/Allbridge_io\/status\/1642508107761831937?ref_src=twsrc%5Etfw\">April 2, 2023<\/a><\/p><\/blockquote>\n<p> <script async=\"\" src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>The team said the exploit used by the hacker could have allowed attacking other pools, so the bridge&#8217;s operation was suspended until the vulnerability was identified.<\/p>\n<p>The developers offered a bounty for the return of stolen funds, without specifying the amount of the loss. They stressed, however, that they would not pursue the white-hat hacker.<\/p>\n<p>The company also launched a <a href=\"https:\/\/core.allbridge.io\/pools\" title=\"\">web interface<\/a>, which allows liquidity providers to withdraw assets.<\/p>\n<\/div>\n<p>Earlier in March, the Hedera Hashgraph platform team reported an <a href=\"https:\/\/forklog.com\/en\/news\/hedera-hacked-for-an-undisclosed-amount\">unauthorized withdrawal of assets<\/a> from the Hedera Token Service.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Allbridge cross-chain bridge lost digital assets worth about $570,000 as a result of a hacker attack. An unknown actor manipulated the swap price to drain tokens from the pool on the BNB Chain, according to PeckShield analysts.<\/p>\n","protected":false},"author":1,"featured_media":76571,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1210,44],"class_list":["post-76570","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cross-chain-protocols","tag-cybercrime"],"aioseo_notices":[],"amp_enabled":true,"views":"35","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/76570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=76570"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/76570\/revisions"}],"predecessor-version":[{"id":76572,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/76570\/revisions\/76572"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/76571"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=76570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=76570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=76570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}