According to CoinMeta, and as analyzed by ChainSecurity, the cross-chain bridge Allbridge was attacked on August 19, resulting in a loss of approximately $190,000. The attackers exploited a vulnerability in its verification process for the senders and recipients of messages related to CCTP and the actual coin minting results of USDC. They managed to record forged messages as legitimate transactions and used AAVE lightning loans to withdraw funds, ultimately netting a profit of about $189,800. ChainSecurity pointed out that the root cause of the issue lay in Allbridge's mistake of treating Circle and attestation as valid proof of asset receipt.