Symbiosis Finance
Last changed 2026-11-01 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 52 → 55. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6 |
| Incidents it suffered (e.g. hacks) | -10 |
| Problems around it, caused by others | -3.1 |
| Long-running | +10 |
| Recent unresolved incident | -11 |
| Sum | 45 |
- 2 sections set aside: the claims did not hold up in a fact-check, pending correction.
Score: 55/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-01 · 9 of 12 claims confirmed · 3 need better sources
anchored·46VRG8…yu2sSummary
Symbiosis Finance is a cross-chain DEX and bridge protocol launched in March 2022, enabling token swaps across 50+ EVM and non-EVM networks via synthetic assets and a permissioned relayer network. On September 11, 2026, an attacker exploited a message-validation flaw in its BridgeV2 contract, minting approximately 46.1 billion unbacked syBTC tokens on BNB Chain and extracting around $336,000 in real funds; total protocol losses were estimated at 9.97 BTC (~$770,000). The Bitcoin Bridge remains offline as of mid-September 2026, and a structural relayer-collusion risk — whereby two-thirds of MPC nodes acting together could drain user funds — persists independently of the exploit patch.
Connected Entities
11 entities · 60 linked investigations- Ethereum→mentioned with→Bitcoin(60%)
- DAO Maker→mentioned with→Ethereum(60%)
- KuCoin→mentioned with→Uniswap(60%)
- KuCoin→mentioned with→Bitcoin(70%)
- KuCoin→mentioned with→Ethereum(60%)
- Binance→mentioned with→Ethereum(65%)
- Symbiosis Finance→mentioned with→KuCoin(75%)
- Symbiosis Finance→mentioned with→Bitcoin(80%)
- Symbiosis Finance→mentioned with→Ethereum(80%)
- Symbiosis Finance→mentioned with→Uniswap(65%)
- + 17 more
2 submissions awaiting moderator review.
Timeline(8 events)
1 January 2021
Symbiosis Finance co-founded by Will Kamalov and Nick Avramov; Alexey Lushnikov joins as CTO.
Tracxn / Crunchbase1 March 2022
Symbiosis Finance launches on mainnet, connecting multiple EVM and non-EVM networks via synthetic assets and a permissioned relayer network.
LI.FI Deep Dive11 September 2026
BridgeV2 contract exploited at approximately 04:28 UTC. Attacker uses a ~330-satoshi ($0.25) Bitcoin deposit to exploit a decoder bug and fee-logic flaw, minting approximately 46.1 billion unbacked syBTC tokens on BNB Chain. Twelve fraudulent deposit messages cross BNB Chain, Ethereum, and Rootstock within four minutes. Actual proceeds: ~$336,000 via Uniswap v4 on Ethereum. Symbiosis estimates total LP and user losses at 9.97 BTC (~$770,000). Bitcoin Bridge immediately suspended.
Crypto Briefing / Shattered.io / NewsCord11 September 2026
Blockaid detects and publicizes the suspicious activity, preceding Symbiosis's formal announcement.
Parameter.io11 September 2026
Symbiosis team secures approximately 15 BTC in a multisig wallet and announces rerouting of Bitcoin swaps through Chainflip and THORChain.
KuCoin13 September 2026
Symbiosis extends a public 20% white-hat bounty offer to the attacker, with a deadline of September 13, 2026. No public response from the attacker is reported.
Crypto Briefing14 September 2026
Native Bitcoin Bridge remains offline. No formal compensation plan for affected liquidity providers published. Team commits to building a compensation framework and commissions independent security audits. Post-mortem subsequently published per KuCoin reporting.
KuCoin / Shattered.ioDecision Log
- slot 464260115 · hash EwmD1H9KhP5DTXM97xg9P4AQuUYm6BCvW4GdXnkoyEeo
- slot 464260109 · hash EMFg4n1MxEXbAvjos3C2wZdN6WvBNaB2tGrKMMsKN5Wt
- slot 464260104 · hash 9r72cXS5iawr8viS7HxnvQhYL5pR3niWFJutKp3BcSjd
- slot 455366930 · hash B6bfg9ifDCHgas8PNVpfubTg3XA1FmJ7Kt43KK7uXJkP
- slot 447790802 · hash 9WHuPehNjpDaLkEeteiFsbGxdMpTQe8ZXgZWxWNKPRU5
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 16 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/17/2026, 12:04:12 PM
last updated: 11/1/2026, 10:28:14 PM
9 viewsavoid.net — verified advice for a post-truth world