ETHSecurity Community

Defimon detected an exploit on Allbridge.io that drained $191K on Base. Vulnerable CCTP router paid out whatever a Circle message claimed. The attacker forged one in July, sat on it 24 days, and fired 6 seconds after a real $191K transfer landed. https://defimon.xyz/blog/allbridge-hack-august-2026