{"investigation":{"slug":"symbiosis-finance-bridgev2-sybtc-exploit-september-2026","entity_name":"Symbiosis Finance BridgeV2 syBTC Exploit (September 2026)","trust_score":19,"severity_base":null,"score_modifier":-11.4,"confidence":0.82,"status":"published","content_type":"investigation","summary":"On September 11, 2026, an attacker exploited Symbiosis Finance's BridgeV2 contract to mint unbacked synthetic Bitcoin (syBTC), approximately 2^62 raw units or about 46.1 billion syBTC by the most cited count, more than 2,000 times Bitcoin's maximum supply; published accounts differ on whether the cause was two chained deposit-parsing and fee-arithmetic bugs or a failure to check relayer-signed messages against locked collateral. The attacker realised about $336,000 by selling roughly 4.39 WBTC on Uniswap V4, while KuCoin put the total protocol loss at 9.97 BTC (~$770,000). Symbiosis halted its native Bitcoin bridge, said it recovered about 15 BTC, offered a 20% bounty that expired unanswered, and announced a full rewrite and new audit before any relaunch; no post-mortem or verifying on-chain addresses had been published as of mid-September 2026.","sections":[{"content":"Symbiosis Finance is a multi-chain liquidity and cross-chain bridging protocol supporting EVM and non-EVM blockchains including Ethereum, BNB Chain, TRON and TON. At approximately 04:28 UTC on September 11, 2026, an unknown attacker exploited the protocol's BridgeV2 smart contract and caused it to mint an enormous quantity of synthetic Bitcoin (syBTC) without real Bitcoin collateral backing, sending the tokens to a freshly created externally owned account (EOA). The notional quantity (approximately 46.1 billion syBTC by the most widely reported count) exceeds Bitcoin's hard-capped supply of 21 million coins by a factor of more than 2,000. Reports differ on how the attack was executed: according to KuCoin and other outlets, the attacker deposited 330 satoshis (~$0.25) and made 12 irregular deposit transactions spanning BNB Chain, Ethereum and Rootstock over roughly four minutes; according to PANews and Crypto Times, the attacker used eight BridgeV2 transactions, with the mint landing on BNB Chain. The on-chain security firm Blockaid detected the anomalous signed BridgeV2 activity in real time, flagged it to the Symbiosis team and publicly reported the breach. Symbiosis halted all native Bitcoin bridge routes upon confirmation; EVM-chain, TRON, TON and Octopool routes were not affected and remained operational. The incident has been catalogued by the Delta Incident Archive as DCI-2026-304.","heading":"Incident Overview","sources":[{"url":"https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/","name":"Symbiosis recovers 15 BTC after Bitcoin Bridge exploit, offers attacker 20% bounty — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://newscord.org/article/attacker-mints-461-billion-fake-sybtc-in-symbiosis-bridgev2-exploit-symbiosis-re--Story_20260914_Symbiosissaysrecover303610ea","name":"Attacker Mints 46.1 Billion Fake SyBTC in Symbiosis BridgeV2 Exploit — NewsCord (11-outlet comparison)","type":"news_article","credibility":2},{"url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit","name":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","type":"news_article","credibility":2},{"url":"https://www.kucoin.com/news/flash/symbiosis-hit-by-770k-loss-after-attacker-mints-46-1b-sybtc","name":"Symbiosis Hit by $770K Loss After Attacker Mints 46.1B syBTC — KuCoin News","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/09/11/symbiosis-bridge-exploit-hacker-mints-368-9-billion-synthetic-bitcoin/","name":"Symbiosis Bridge Exploit: Hacker Mints 368.9 Billion Synthetic Bitcoin but Cashes Out Only 4.39 WBTC — Crypto Times","type":"news_article","credibility":2},{"url":"https://panews.io/articles/01a08f10-b400-7221-8662-1187f7117ce5","name":"Cross-Chain Protocol Symbiosis on BSC Attacked, Attacker Cashed Out Approximately $336,000 — PANews","type":"news_article","credibility":2},{"url":"https://www.cryptopolitan.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","name":"Symbiosis halts BTC bridge after exploit, spotlighting cross-chain risk — Cryptopolitan","type":"news_article","credibility":2}],"severity":"critical"},{"content":"No official post-mortem from Symbiosis had been released as of September 14, 2026, and published accounts of the root cause differ. Account 1 (two chained bugs): according to reporting citing Blockaid and the Delta Incident Archive, chiefly Blockonomi and KuCoin, the exploit chained two distinct bugs in BridgeV2. The first caused the contract to inspect an incorrect section of the incoming Bitcoin transaction when identifying the depositor, allowing the attacker to spoof deposit credentials. The second was an arithmetic error in fee processing: a deposit of 330 satoshis, below the protocol's minimum fee threshold, produced a negative fee that the contract processed as an addition rather than a subtraction, letting the contract accept an arbitrary deposit value without real collateral. NewsCord's comparison noted that nine of fourteen reporting outlets omitted specific root-cause details at the time of publication. Account 2 (message-authentication failure): BridgeV2 is designed to accept cross-chain instructions from two sources, the on-chain Portal/Synthesis contracts and off-chain relayers whose transactions are authenticated by a Multi-Party Computation (MPC) threshold signature key stored in the contract; according to Symbiosis's documentation, the contract executes the instructions in the calldata of MPC-signed calls. According to Shattered.io and other outlets, BridgeV2 verified that a message was signed by a legitimate relayer but did not independently verify that the claimed mint amounts were backed by collateral actually locked on the source chain; as Shattered.io put it, 'a message can be perfectly signed by a legitimate relayer and still describe a transaction that never happened.' On this account the attacker forged or manipulated BridgeV2 receive messages across eight transactions, each accepted without collateral-amount validation; it is described as a message-authentication failure, not an oracle exploit or price manipulation. Both accounts agree that approximately 2^62 raw syBTC units were minted (the token uses 8 decimal places), roughly 46.1 billion whole syBTC, and that the syBTC peg assumption, that each unit is backed 1:1 by real locked Bitcoin secured via MPC threshold signatures, was broken for the duration of the attack.","heading":"Technical Root Cause","sources":[{"url":"https://www.kucoin.com/news/flash/symbiosis-hit-by-770k-loss-after-attacker-mints-46-1b-sybtc","name":"Symbiosis Hit by $770K Loss After Attacker Mints 46.1B syBTC — KuCoin News","type":"news_article","credibility":2},{"url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit","name":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","type":"news_article","credibility":2},{"url":"https://newscord.org/article/attacker-mints-461-billion-fake-sybtc-in-symbiosis-bridgev2-exploit-symbiosis-re--Story_20260914_Symbiosissaysrecover303610ea","name":"Attacker Mints 46.1 Billion Fake SyBTC in Symbiosis BridgeV2 Exploit — NewsCord (11-outlet comparison)","type":"news_article","credibility":2},{"url":"https://shattered.io/symbiosis-bridge-exploit-46-billion-sybtc-2026/","name":"Symbiosis Bridge Hack: $46B Bug Mints, $336K Stolen — Shattered.io","type":"research","credibility":2},{"url":"https://docs.symbiosis.finance/crosschain-liquidity-engine/bridge-contracts","name":"Symbiosis BridgeV2 Contract Architecture — Symbiosis Official Documentation","type":"official","credibility":1},{"url":"https://cryptoticker.io/en/symbiosis-btc-bridge-exploit-check/","name":"Symbiosis Hack: Check Your Bridged Bitcoin Now — CryptoTicker","type":"news_article","credibility":2},{"url":"https://en.coin-turk.com/symbiosis-halts-bitcoin-bridge-after-336000-exploit-highlights-cross-chain-risks/","name":"Symbiosis halts Bitcoin bridge after $336,000 exploit, highlights cross-chain risks — Coin-Turk","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Blockaid's analysis put the nominal face value of the minted syBTC at approximately $46.1 billion, calculated at roughly $76,500 per BTC applied to approximately 2^62 raw units. Reports differ on the quantity minted: approximately 46.1 billion syBTC according to Blockaid and most outlets, but approximately 368.9 billion syBTC across Ethereum and BNB Chain after eight bridge transactions according to a separate count by DefraudTG reported by Crypto Times; the disparity reflects differences in counting methodology and in which chains were included. Liquidity constraints limited what the attacker could realise. The attacker moved a portion of the minted tokens to Ethereum and sold approximately 4.39 WBTC through Uniswap V4, netting approximately $336,000 before the bridge was halted; the remaining tokens found no market demand, and an estimated 184.5 billion syBTC remained stranded on BNB Chain with no meaningful exit liquidity. Reports differ on the total loss: KuCoin placed the confirmed protocol loss at 9.97 BTC (approximately $770,000 at the time of the exploit), of which the attacker directly pocketed approximately $336,000, while other outlets describe the $336,000 as the actual loss of collateral backing from the protocol's BTC liquidity pools. Symbiosis subsequently recovered approximately 15 BTC (~$1.15 million) and transferred it to a team-controlled multisignature wallet. The protocol said the final loss was still being calculated as of September 12 and again as of September 14, 2026. No attacker wallet address or recovery transaction hash had been publicly disclosed as of September 14, preventing independent on-chain verification of the recovery claim.","heading":"Financial Impact","sources":[{"url":"https://www.kucoin.com/news/flash/symbiosis-hit-by-770k-loss-after-attacker-mints-46-1b-sybtc","name":"Symbiosis Hit by $770K Loss After Attacker Mints 46.1B syBTC — KuCoin News","type":"news_article","credibility":2},{"url":"https://coincentral.com/symbiosis-bitcoin-bridge-exploit-minted-billions-in-fake-sybtc-hacker-walks-away-with-336k","name":"Symbiosis Bitcoin Bridge Exploit Minted Billions in Fake syBTC, Hacker Walks Away with $336K — CoinCentral","type":"news_article","credibility":2},{"url":"https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312","name":"Symbiosis Recovers 15 BTC After Bridge Hack, Liquidity Providers Still Waiting on Compensation — The Currency Analytics","type":"news_article","credibility":2},{"url":"https://panews.io/articles/01a09332-a120-7509-9a58-f7cf87496f7a","name":"Symbiosis: Approximately 15 BTC Recovered, Final Loss Still Being Calculated, 20% White Hat Bounty Offered — PANews","type":"news_article","credibility":2},{"url":"https://www.cryptotimes.io/2026/09/11/symbiosis-bridge-exploit-hacker-mints-368-9-billion-synthetic-bitcoin/","name":"Symbiosis Bridge Exploit: Hacker Mints 368.9 Billion Synthetic Bitcoin but Cashes Out Only 4.39 WBTC — Crypto Times","type":"news_article","credibility":2},{"url":"https://shattered.io/symbiosis-bridge-exploit-46-billion-sybtc-2026/","name":"Symbiosis Bridge Hack: $46B Bug Mints, $336K Stolen — Shattered.io","type":"research","credibility":2},{"url":"https://www.cryptometer.io/news/symbiosis-exploit-highlights-bitcoin-bridge-risk-without-touching-bitcoin/","name":"Symbiosis Exploit Highlights Bitcoin Bridge Risk Without Touching Bitcoin — Cryptometer","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Upon detection on September 11, 2026, Symbiosis suspended all native Bitcoin bridge routing while keeping other routes operational. An asymmetric withdrawal mode was observed: users could swap from WBTC on Ethereum into Bitcoin, withdrawing existing positions, but could not initiate new BTC deposits into the bridge. The team stated that Bitcoin-related swap functions were temporarily unavailable and that an update was being deployed; the relayer group was reported to be operating normally on non-BTC routes. Symbiosis said it had recovered approximately 15 BTC and secured it in a team-controlled multisig. Reports differ on when this was announced: September 11 according to CoinPaprika and Crypto Briefing, September 12 according to PANews. The protocol offered the attacker a 20% white-hat bounty on any returned funds, with a deadline of September 13, 2026. The attacker did not publicly respond or return funds before the deadline, after which Symbiosis redirected the 20% offer to anyone providing information leading to further recovery. Bitcoin swaps were partially restored through third-party bridge aggregators Chainflip and THORChain while Symbiosis's own Bitcoin bridge remained offline. The protocol announced a complete software rewrite and a new external security audit as prerequisites for relaunching the native Bitcoin bridge, without giving a timeline. Symbiosis said it was contacting affected liquidity providers directly to build a compensation framework, but had not published eligibility criteria, payment amounts or a timeline as of September 14, 2026.","heading":"Protocol Response and Recovery","sources":[{"url":"https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/","name":"Symbiosis recovers 15 BTC after Bitcoin Bridge exploit, offers attacker 20% bounty — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312","name":"Symbiosis Recovers 15 BTC After Bridge Hack, Liquidity Providers Still Waiting on Compensation — The Currency Analytics","type":"news_article","credibility":2},{"url":"https://coinpaprika.com/news/hacker-minted-46-billion-fake-bitcoin/","name":"A Hacker Minted 46 Billion Fake Bitcoin. Symbiosis Clawed Back 15 and Offered a 20% Bounty — CoinPaprika","type":"news_article","credibility":2},{"url":"https://panews.io/articles/01a08f20-2283-76d2-ae64-9b17624a343a","name":"Symbiosis: Bitcoin-related Swap Function Currently Unavailable, Team Deploying Update — PANews","type":"news_article","credibility":2},{"url":"https://panews.io/articles/01a09332-a120-7509-9a58-f7cf87496f7a","name":"Symbiosis: Approximately 15 BTC Recovered, Final Loss Still Being Calculated, 20% White Hat Bounty Offered — PANews","type":"news_article","credibility":2},{"url":"https://cryptoticker.io/en/symbiosis-btc-bridge-exploit-check/","name":"Symbiosis Hack: Check Your Bridged Bitcoin Now — CryptoTicker","type":"news_article","credibility":2},{"url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit","name":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","type":"news_article","credibility":2}],"severity":"medium"},{"content":"Before this incident, Symbiosis Finance had reported no major security incidents since its mainnet launch in March 2022 and maintained a public audit repository on GitHub (github.com/symbiosis-finance/audits). The protocol published approximately 13 audit reports across 11 protocol modules, by Decurity, Zokyo, SlowMist, Omniscia and HashCloak. Per the repository and reporting on it: Omniscia, SlowMist and Zokyo each audited the core EVM protocol; Zokyo audited MetaRouter v3, Pool and TON Bridge v1 and v2; Decurity audited the Depository and on-chain swap components, the Relayers Network (a 2024 audit) and the Frontend; HashCloak and Zokyo audited the Terra implementation; and Zokyo audited a NEAR implementation. Staking and the BTC Bridge contracts are also listed among the audited modules. Decurity audited the Symbiosis Depository module, which relates to bridge and Bitcoin functionality, in October 2025, and Symbiosis acknowledged that Decurity had conducted a third-party audit of its native BTC bridge. The Decurity Relayers Network audit covered the off-chain component most directly related to MPC-signed message submission. Whether any audit covered the specific BridgeV2 code path exploited in September 2026 had not been publicly confirmed; either the BridgeV2 message-validation logic was out of scope or the flaw was not identified, and the exploited code may have been introduced or modified after audit scopes were finalised. Neither the protocol nor any auditor had publicly identified the vector as a known risk before the exploit.","heading":"Audit History and Security Posture","sources":[{"url":"https://docs.symbiosis.finance/main-concepts/security-audits","name":"Symbiosis Security Audits Documentation","type":"official","credibility":1},{"url":"https://github.com/symbiosis-finance/audits/blob/master/README.md","name":"Symbiosis Finance Audits — GitHub Repository","type":"official","credibility":1},{"url":"https://github.com/symbiosis-finance/audits","name":"Symbiosis Finance Audits Repository — GitHub","type":"official","credibility":1},{"url":"https://github.com/symbiosis-finance/audits/blob/master/Symbiosis%20Protocol/ton-bridge/Symbiosis%20TON%20Bridge%20v2%20-%20Zokyo.pdf","name":"Symbiosis TON Bridge v2 Audit — Zokyo (GitHub PDF)","type":"research","credibility":1},{"url":"https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/","name":"Symbiosis recovers 15 BTC after Bitcoin Bridge exploit, offers attacker 20% bounty — Crypto Briefing","type":"news_article","credibility":2},{"url":"https://en.coin-turk.com/symbiosis-halts-bitcoin-bridge-after-336000-exploit-highlights-cross-chain-risks/","name":"Symbiosis halts Bitcoin bridge after $336,000 exploit, highlights cross-chain risks — Coin-Turk","type":"news_article","credibility":2}],"severity":"high"},{"content":"Security reporting describes the incident as a logic flaw in a bridge's verification layer rather than a cryptographic break of an underlying chain: bridge contracts that accept messages without independently checking claimed amounts against locked reserves can become 'printing presses' for synthetic assets. Bitcoin's own network was not affected; the exploit was confined to synthetic representations of Bitcoin on BNB Chain and Ethereum. The incident occurred close in time to a breach of the Liquid Network, and reports differ on how the two relate. According to Blockonomi and other outlets, the Symbiosis exploit was the third Bitcoin bridge unbacking attack reported that week, after incidents on the Liquid Network (reportedly involving approximately 4,000 LBTC) and Nomic, all described as using an identical exploit methodology, which would suggest a class-level weakness in how some Bitcoin bridges handle fee arithmetic and deposit sender validation. Other outlets reported the Liquid Network breach as a loss of approximately $320 million and described the two incidents as technically unrelated. No coordinating actor or shared codebase had been publicly attributed across the incidents.","heading":"Broader Cross-Chain Bridge Context","sources":[{"url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit","name":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","type":"news_article","credibility":2},{"url":"https://finance.biggo.com/news/570d3995-084e-4fea-b185-b6478df57325","name":"Symbiosis Bitcoin Bridge Exploit Mints 46 Billion syBTC, Team Recovers 15 BTC — BigGo Finance","type":"news_article","credibility":2},{"url":"https://www.cryptometer.io/news/symbiosis-exploit-highlights-bitcoin-bridge-risk-without-touching-bitcoin/","name":"Symbiosis Exploit Highlights Bitcoin Bridge Risk Without Touching Bitcoin — Cryptometer","type":"news_article","credibility":2},{"url":"https://startupfortune.com/symbiosis-bridge-bug-let-a-hacker-mint-more-bitcoin-than-will-ever-exist/","name":"Symbiosis Bridge Bug Let A Hacker Mint More Bitcoin Than Will Ever Exist — Startup Fortune","type":"news_article","credibility":2},{"url":"https://www.cryptopolitan.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","name":"Symbiosis halts BTC bridge after exploit, spotlighting cross-chain risk — Cryptopolitan","type":"news_article","credibility":2}],"severity":"medium"},{"content":"As of September 13 to 17, 2026, Symbiosis's native BTC bridge remained halted, and several matters were unresolved or unverifiable because no attacker wallet address, multisig recovery address or transaction hash had been made public: (1) the approximately 15 BTC recovery, asserted by Symbiosis but not checkable on a block explorer; (2) the final total loss, which Symbiosis said was still being calculated; (3) whether a patch to the BridgeV2 flaw had been deployed or audited; (4) a formal public post-mortem identifying the precise contract flaw; and (5) the number of affected liquidity providers and the scope of the compensation framework. This page will need updating as on-chain data, a post-mortem and compensation disclosures become available.","heading":"Open Questions and Unverified Claims","sources":[{"url":"https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312","name":"Symbiosis Recovers 15 BTC After Bridge Hack, Liquidity Providers Still Waiting on Compensation — The Currency Analytics","type":"news_article","credibility":2},{"url":"https://newscord.org/article/attacker-mints-461-billion-fake-sybtc-in-symbiosis-bridgev2-exploit-symbiosis-re--Story_20260914_Symbiosissaysrecover303610ea","name":"Attacker Mints 46.1 Billion Fake SyBTC in Symbiosis BridgeV2 Exploit — NewsCord (11-outlet comparison)","type":"news_article","credibility":2},{"url":"https://panews.io/articles/01a09332-a120-7509-9a58-f7cf87496f7a","name":"Symbiosis: Approximately 15 BTC Recovered, Final Loss Still Being Calculated, 20% White Hat Bounty Offered — PANews","type":"news_article","credibility":2},{"url":"https://www.cryptopolitan.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","name":"Symbiosis halts BTC bridge after exploit, spotlighting cross-chain risk — Cryptopolitan","type":"news_article","credibility":2}],"severity":"high"}],"timeline":[{"date":"2022-03","event":"Symbiosis Finance launched on mainnet; it went on to accumulate audit reports from Decurity, Zokyo, SlowMist and Omniscia across 11 protocol modules and reported no major security incidents before September 2026.","source":"Symbiosis Security Audits Documentation","source_url":"https://docs.symbiosis.finance/main-concepts/security-audits"},{"date":"2024","event":"Decurity completed a security audit of the Symbiosis Relayers Network, the off-chain component responsible for MPC-signed message submission to BridgeV2.","source":"Symbiosis Finance Audits Repository — GitHub","source_url":"https://github.com/symbiosis-finance/audits"},{"date":"2025-10","event":"Decurity completed an audit of the Symbiosis Depository module, which relates to bridge and Bitcoin functionality. Whether the BridgeV2 code exploited in September 2026 fell within scope has not been confirmed.","source":"Symbiosis recovers 15 BTC after Bitcoin Bridge exploit, offers attacker 20% bounty — Crypto Briefing","source_url":"https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/"},{"date":"2026-09","event":"On September 11 at approximately 04:28 UTC, an attacker submitted 330 satoshis (~$0.25) to the BridgeV2 contract and executed 12 irregular transactions across BNB Chain, Ethereum and Rootstock over roughly four minutes, minting approximately 46.1 billion unbacked syBTC to a freshly created EOA (KuCoin's account).","source":"Symbiosis Hit by $770K Loss After Attacker Mints 46.1B syBTC — KuCoin News","source_url":"https://www.kucoin.com/news/flash/symbiosis-hit-by-770k-loss-after-attacker-mints-46-1b-sybtc"},{"date":"2026-09","event":"On September 11, per PANews, the attacker submitted forged BridgeV2 messages across eight transactions on BNB Chain, minting approximately 2^62 raw syBTC units (nominal face value ~$46.1 billion) to a newly created wallet without depositing real Bitcoin.","source":"Cross-Chain Protocol Symbiosis on BSC Attacked, Attacker Cashed Out Approximately $336,000 — PANews","source_url":"https://panews.io/articles/01a08f10-b400-7221-8662-1187f7117ce5"},{"date":"2026-09","event":"On September 11, Blockaid detected the anomalous on-chain activity in real time and publicly flagged the exploit on X (formerly Twitter).","source":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","source_url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit"},{"date":"2026-09","event":"On September 11, the attacker bridged a portion of the minted syBTC to Ethereum and sold approximately 4.39 WBTC through Uniswap V4, realising approximately $336,000; the remaining tokens found no market demand.","source":"Symbiosis Bitcoin Bridge Exploit Minted Billions in Fake syBTC, Hacker Walks Away with $336K — CoinCentral","source_url":"https://coincentral.com/symbiosis-bitcoin-bridge-exploit-minted-billions-in-fake-sybtc-hacker-walks-away-with-336k"},{"date":"2026-09","event":"On September 11, Symbiosis suspended all native Bitcoin bridge routes upon confirming the exploit; EVM, TRON, TON and Octopool routes remained operational.","source":"Symbiosis recovers 15 BTC after Bitcoin Bridge exploit, offers attacker 20% bounty — Crypto Briefing","source_url":"https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/"},{"date":"2026-09","event":"On September 11, Symbiosis stated that Bitcoin-related swap functions were unavailable while an update was being deployed.","source":"Symbiosis: Bitcoin-related Swap Function Currently Unavailable, Team Deploying Update — PANews","source_url":"https://panews.io/articles/01a08f20-2283-76d2-ae64-9b17624a343a"},{"date":"2026-09","event":"Symbiosis announced it had recovered approximately 15 BTC (~$1.15 million) into a team-controlled multisig and offered the attacker a 20% white-hat bounty with a September 13 deadline; CoinPaprika dates the announcement to September 11.","source":"A Hacker Minted 46 Billion Fake Bitcoin. Symbiosis Clawed Back 15 and Offered a 20% Bounty — CoinPaprika","source_url":"https://coinpaprika.com/news/hacker-minted-46-billion-fake-bitcoin/"},{"date":"2026-09","event":"On September 12, per PANews, Symbiosis confirmed the approximately 15 BTC recovery and the 20% bounty offer, said the final loss was still being calculated, and began contacting affected liquidity providers about compensation.","source":"Symbiosis: Approximately 15 BTC Recovered, Final Loss Still Being Calculated, 20% White Hat Bounty Offered — PANews","source_url":"https://panews.io/articles/01a09332-a120-7509-9a58-f7cf87496f7a"},{"date":"2026-09","event":"On September 13 the white-hat bounty deadline expired without the attacker publicly responding or returning funds; Symbiosis redirected the 20% offer to anyone providing information leading to further recovery.","source":"Symbiosis Recovers 15 BTC After Bridge Hack, Liquidity Providers Still Waiting on Compensation — The Currency Analytics","source_url":"https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312"},{"date":"2026-09","event":"On September 14, Symbiosis said final loss figures were still being calculated and that it was building a compensation framework with affected liquidity providers; a complete software rewrite and new external audit were announced as prerequisites for relaunching the bridge, with no timeline.","source":"Symbiosis Recovers 15 BTC After Bridge Hack, Liquidity Providers Still Waiting on Compensation — The Currency Analytics","source_url":"https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312"},{"date":"2026-09","event":"By September 14, Bitcoin swaps had been restored through third-party partners Chainflip and THORChain while Symbiosis's own Bitcoin bridge remained suspended.","source":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","source_url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit"}],"sources_used":[{"url":"https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/","name":"Symbiosis recovers 15 BTC after Bitcoin Bridge exploit, offers attacker 20% bounty — Crypto Briefing","type":"news_article","archive_url":"http://web.archive.org/web/20260917125500/https://cryptobriefing.com/symbiosis-bitcoin-bridge-exploit-bounty-recovery/","credibility":2,"archive_timestamp":"2026-09-17T12:55:00+00:00"},{"url":"https://newscord.org/article/attacker-mints-461-billion-fake-sybtc-in-symbiosis-bridgev2-exploit-symbiosis-re--Story_20260914_Symbiosissaysrecover303610ea","name":"Attacker Mints 46.1 Billion Fake SyBTC in Symbiosis BridgeV2 Exploit — NewsCord (11-outlet comparison)","type":"news_article","archive_url":"http://web.archive.org/web/20260917130622/https://newscord.org/article/attacker-mints-461-billion-fake-sybtc-in-symbiosis-bridgev2-exploit-symbiosis-re--Story_20260914_Symbiosissaysrecover303610ea","credibility":2,"archive_timestamp":"2026-09-17T13:06:22+00:00"},{"url":"https://coincentral.com/symbiosis-bitcoin-bridge-exploit-minted-billions-in-fake-sybtc-hacker-walks-away-with-336k","name":"Symbiosis Bitcoin Bridge Exploit Minted Billions in Fake syBTC, Hacker Walks Away with $336K — CoinCentral","type":"news_article","archive_url":"https://web.archive.org/web/20260917175646/https://coincentral.com/the-crypto-bill-that-could-change-everything-heads-to-a-senate-vote-tuesday/","credibility":2,"archive_timestamp":"2026-09-17T17:56:46+00:00"},{"url":"https://www.kucoin.com/news/flash/symbiosis-hit-by-770k-loss-after-attacker-mints-46-1b-sybtc","name":"Symbiosis Hit by $770K Loss After Attacker Mints 46.1B syBTC — KuCoin News","type":"news_article","archive_url":"http://web.archive.org/web/20260917131250/https://www.kucoin.com/news/flash/symbiosis-hit-by-770k-loss-after-attacker-mints-46-1b-sybtc","credibility":2,"archive_timestamp":"2026-09-17T13:12:50+00:00"},{"url":"https://blockonomi.com/symbiosis-bitcoin-bridge-hacked-46b-fake-sybtc-minted-in-336k-exploit","name":"Symbiosis Bitcoin Bridge Hacked: 46B Fake syBTC Minted in $336K Exploit — Blockonomi","type":"news_article","archive_url":"https://web.archive.org/web/20260917201948/https://blockonomi.com/revolut-data-breach-hackers-leak-customer-documents-demand-ransom-payment/","credibility":2,"archive_timestamp":"2026-09-17T20:19:48+00:00"},{"url":"https://coinpaprika.com/news/hacker-minted-46-billion-fake-bitcoin/","name":"A Hacker Minted 46 Billion Fake Bitcoin. Symbiosis Clawed Back 15 and Offered a 20% Bounty — CoinPaprika","type":"news_article","archive_url":"https://web.archive.org/web/20260917175649/https://coinpaprika.com/news/hacker-minted-46-billion-fake-bitcoin/","credibility":2,"archive_timestamp":"2026-09-17T17:56:49+00:00"},{"url":"https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312","name":"Symbiosis Recovers 15 BTC After Bridge Hack, Liquidity Providers Still Waiting on Compensation — The Currency Analytics","type":"news_article","archive_url":"https://web.archive.org/web/20260917180326/https://thecurrencyanalytics.com/bitcoin/symbiosis-recovers-15-btc-after-bridge-hack-liquidity-providers-still-waiting-on-compensation-293312","credibility":2,"archive_timestamp":"2026-09-17T18:03:26+00:00"},{"url":"https://shattered.io/symbiosis-bridge-exploit-46-billion-sybtc-2026/","name":"Symbiosis Bridge Hack: $46B Bug Mints, $336K Stolen — Shattered.io","type":"research","archive_url":"http://web.archive.org/web/20260917130746/https://shattered.io/symbiosis-bridge-exploit-46-billion-sybtc-2026/","credibility":2,"archive_timestamp":"2026-09-17T13:07:46+00:00"},{"url":"https://finance.biggo.com/news/570d3995-084e-4fea-b185-b6478df57325","name":"Symbiosis Bitcoin Bridge Exploit Mints 46 Billion syBTC, Team Recovers 15 BTC — BigGo Finance","type":"news_article","archive_url":"https://web.archive.org/web/20260917175851/https://finance.biggo.com/news/570d3995-084e-4fea-b185-b6478df57325","credibility":2,"archive_timestamp":"2026-09-17T17:58:51+00:00"},{"url":"https://en.coin-turk.com/symbiosis-reports-bitcoin-bridge-exploit-336000-taken-in-sybtc-scam/","name":"Symbiosis reports Bitcoin bridge exploit, $336,000 taken in syBTC scam — CoinTurk","type":"news_article","archive_url":"http://web.archive.org/web/20260917165106/https://en.coin-turk.com/symbiosis-reports-bitcoin-bridge-exploit-336000-taken-in-sybtc-scam/","credibility":2,"archive_timestamp":"2026-09-17T16:51:06+00:00"},{"url":"https://parameter.io/symbiosis-bitcoin-bridge-hack-46-billion-fake-sybtc-tokens-created-attacker-takes-336k/","name":"Symbiosis Bitcoin Bridge Hack: 46 Billion Fake syBTC Tokens Created, Attacker Takes $336K — Parameter.io","type":"news_article","archive_url":"http://web.archive.org/web/20260917130645/https://parameter.io/symbiosis-bitcoin-bridge-hack-46-billion-fake-sybtc-tokens-created-attacker-takes-336k/","credibility":2,"archive_timestamp":"2026-09-17T13:06:45+00:00"},{"url":"https://docs.symbiosis.finance/main-concepts/security-audits","name":"Symbiosis Security Audits Documentation","type":"official","archive_url":"http://web.archive.org/web/20260917125849/https://docs.symbiosis.finance/main-concepts/security-audits","credibility":1,"archive_timestamp":"2026-09-17T12:58:49+00:00"},{"url":"https://github.com/symbiosis-finance/audits/blob/master/README.md","name":"Symbiosis Finance Audits — GitHub Repository","type":"official","archive_url":"http://web.archive.org/web/20260917175847/https://github.com/symbiosis-finance/audits/blob/master/README.md","credibility":1,"archive_timestamp":"2026-09-17T17:58:47+00:00"},{"url":"https://www.cryptotimes.io/2026/09/11/symbiosis-bridge-exploit-hacker-mints-368-9-billion-synthetic-bitcoin/","name":"Symbiosis Bridge Exploit: Hacker Mints 368.9 Billion Synthetic Bitcoin but Cashes Out Only 4.39 WBTC — Crypto Times","type":"news_article","archive_url":"https://web.archive.org/web/20260913131316/https://www.cryptotimes.io/2026/09/11/symbiosis-bridge-exploit-hacker-mints-368-9-billion-synthetic-bitcoin/","credibility":2,"archive_timestamp":"2026-09-13T13:13:16+00:00"},{"url":"https://panews.io/articles/01a08f10-b400-7221-8662-1187f7117ce5","name":"Cross-Chain Protocol Symbiosis on BSC Attacked, Attacker Cashed Out Approximately $336,000 — PANews","type":"news_article","archive_url":"http://web.archive.org/web/20260913165735/https://panews.io/articles/01a08f10-b400-7221-8662-1187f7117ce5","credibility":2,"archive_timestamp":"2026-09-13T16:57:35+00:00"},{"url":"https://panews.io/articles/01a08f20-2283-76d2-ae64-9b17624a343a","name":"Symbiosis: Bitcoin-related Swap Function Currently Unavailable, Team Deploying Update — PANews","type":"news_article","archive_url":"https://web.archive.org/web/20260913130422/https://panews.io/articles/01a08f20-2283-76d2-ae64-9b17624a343a","credibility":2,"archive_timestamp":"2026-09-13T13:04:22+00:00"},{"url":"https://panews.io/articles/01a09332-a120-7509-9a58-f7cf87496f7a","name":"Symbiosis: Approximately 15 BTC Recovered, Final Loss Still Being Calculated, 20% White Hat Bounty Offered — PANews","type":"news_article","archive_url":"https://web.archive.org/web/20260913130506/https://panews.io/articles/01a09332-a120-7509-9a58-f7cf87496f7a","credibility":2,"archive_timestamp":"2026-09-13T13:05:06+00:00"},{"url":"https://www.cryptopolitan.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","name":"Symbiosis halts BTC bridge after exploit, spotlighting cross-chain risk — Cryptopolitan","type":"news_article","archive_url":"http://web.archive.org/web/20260913230853/https://www.cryptopolitan.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","credibility":2,"archive_timestamp":"2026-09-13T23:08:53+00:00"},{"url":"https://cryptoticker.io/en/symbiosis-btc-bridge-exploit-check/","name":"Symbiosis Hack: Check Your Bridged Bitcoin Now — CryptoTicker","type":"news_article","archive_url":"https://web.archive.org/web/20260913125736/https://cryptoticker.io/en/symbiosis-btc-bridge-exploit-check/","credibility":2,"archive_timestamp":"2026-09-13T12:57:36+00:00"},{"url":"https://en.coin-turk.com/symbiosis-halts-bitcoin-bridge-after-336000-exploit-highlights-cross-chain-risks/","name":"Symbiosis halts Bitcoin bridge after $336,000 exploit, highlights cross-chain risks — Coin-Turk","type":"news_article","archive_url":"https://web.archive.org/web/20260913125910/https://en.coin-turk.com/symbiosis-halts-bitcoin-bridge-after-336000-exploit-highlights-cross-chain-risks/","credibility":2,"archive_timestamp":"2026-09-13T12:59:10+00:00"},{"url":"https://startupfortune.com/symbiosis-bridge-bug-let-a-hacker-mint-more-bitcoin-than-will-ever-exist/","name":"Symbiosis Bridge Bug Let A Hacker Mint More Bitcoin Than Will Ever Exist — Startup Fortune","type":"news_article","archive_url":"https://web.archive.org/web/20260913130652/https://startupfortune.com/symbiosis-bridge-bug-let-a-hacker-mint-more-bitcoin-than-will-ever-exist/","credibility":2,"archive_timestamp":"2026-09-13T13:06:52+00:00"},{"url":"https://www.cryptometer.io/news/symbiosis-exploit-highlights-bitcoin-bridge-risk-without-touching-bitcoin/","name":"Symbiosis Exploit Highlights Bitcoin Bridge Risk Without Touching Bitcoin — Cryptometer","type":"news_article","archive_url":"https://web.archive.org/web/20260913170233/https://www.cryptometer.io/news/symbiosis-exploit-highlights-bitcoin-bridge-risk-without-touching-bitcoin/","credibility":2,"archive_timestamp":"2026-09-13T17:02:33+00:00"},{"url":"https://docs.symbiosis.finance/crosschain-liquidity-engine/bridge-contracts","name":"Symbiosis BridgeV2 Contract Architecture — Symbiosis Official Documentation","type":"official","archive_url":"http://web.archive.org/web/20260718193127/https://docs.symbiosis.finance/crosschain-liquidity-engine/bridge-contracts","credibility":1,"archive_timestamp":"2026-07-18T19:31:27+00:00"},{"url":"https://github.com/symbiosis-finance/audits","name":"Symbiosis Finance Audits Repository — GitHub","type":"official","archive_url":"https://web.archive.org/web/20260913130021/https://github.com/symbiosis-finance/audits","credibility":1,"archive_timestamp":"2026-09-13T13:00:21+00:00"},{"url":"https://github.com/symbiosis-finance/audits/blob/master/Symbiosis%20Protocol/ton-bridge/Symbiosis%20TON%20Bridge%20v2%20-%20Zokyo.pdf","name":"Symbiosis TON Bridge v2 Audit — Zokyo (GitHub PDF)","type":"research","archive_url":"http://web.archive.org/web/20260913165654/https://github.com/symbiosis-finance/audits/blob/master/Symbiosis%20Protocol/ton-bridge/Symbiosis%20TON%20Bridge%20v2%20-%20Zokyo.pdf","credibility":1,"archive_timestamp":"2026-09-13T16:56:54+00:00"},{"url":"https://naijatipsland.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","name":"Symbiosis halts BTC bridge after exploit — Naijatipsland (syndicated)","type":"news_article","archive_url":"https://web.archive.org/web/20260913130226/https://naijatipsland.com/symbiosis-halts-btc-bridge-after-exploit-spotlighting-cross-chain-risk/","credibility":3,"archive_timestamp":"2026-09-13T13:02:26+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-09-17T17:04:18.323829+00:00","updated_at":"2026-10-30T12:31:24.076+00:00"},"source_quality":{"total":26,"tier1":0,"tier2":0,"tier3":0,"unrated":26},"follower_count":null,"content_updated_at":"2026-10-30T12:31:24.677Z","last_fact_checked_at":"2026-10-30T12:31:24.328Z","fact_check_next_allowed_at":"2026-11-06T12:31:24.328Z","update_next_allowed_at":null}