According to SlowMist's analysis, the cross-chain bridge Allbridge was attacked on August 19, resulting in a loss of approximately $190,000. The attacker exploited a vulnerability in its insufficient verification of CCTP message senders, receivers, and actual USDC minting results. They recorded forged messages as legitimate transactions and used an Aave flash loan to extract the funds, ultimately netting a profit of around $189,800. SlowMist pointed out that the root cause was Allbridge mistakenly treating Circle attestation as proof of actual asset receipt. https://(wublock123.com)/news/slowmist-allbridge-attack-190k-loss-cctp-insufficient-checks-67058