Fact-check findings
What an automated fact-checker found when it re-read Symbiosis Finance BridgeV2 syBTC Exploit (September 2026) against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
stale
1 claimThe claim was accurate when written but events since have overtaken it.
- #1[stale][awaiting moderator]in the summary
“no post-mortem or verifying on-chain addresses had been published as of mid-September 2026”
reviewerNo post-mortem had been published as of mid-September 2026CoinDesk reports a Symbiosis post-mortem on Sept 15, after the page's Sept 14 snapshot. Other outlets disagree on whether a full technical post-mortem exists, so the correction is hedged to 'reported'. I did not verify the on-chain address part.Proposed correction (not yet applied)a Symbiosis post-mortem was reported published on September 15, 2026, and no verifying on-chain addresses had been published as of mid-September 2026
link rot
2 claimsA cited source no longer resolves or no longer says what the page attributes to it.
- #6[link rot][awaiting moderator]in the cited sources
“https://web.archive.org/web/20260917175646/https://coincentral.com/the-crypto-bill-that-could-change-everything-heads-to-a-senate-vote-tuesday/”
reviewerArchive URL for the CoinCentral source points to the wrong articleThe archive slug is about a Senate crypto bill, not the Symbiosis article. I did not fetch it; the mismatch is evident from the URL itself. It does not archive the cited source. - #7[link rot][awaiting moderator]in the cited sources
“https://web.archive.org/web/20260917201948/https://blockonomi.com/revolut-data-breach-hackers-leak-customer-documents-demand-ransom-payment/”
reviewerArchive URL for the Blockonomi source points to the wrong articleThe archive slug is about a Revolut data breach, not Symbiosis. I did not fetch it; the mismatch is evident from the URL itself.
partially supported
1 claimThe cited evidence supports part of the claim but not all of it.
- #2[partially supported][awaiting moderator]in the summary
“published accounts differ on whether the cause was two chained deposit-parsing and fee-arithmetic bugs or a failure to check relayer-signed messages against locked collateral”
reviewerRoot cause is disputed between two chained bugs and a message-authentication failureAccount 1 is corroborated by CoinDesk and the post-mortem it cites. I found no independent confirmation of the 'eight transactions' Account 2, which reads as a looser secondary description.
confirmed
3 claimsThe cited evidence supports the claim as written.
- #3[confirmed][no action needed]in the timeline
“an attacker submitted 330 satoshis (~$0.25) to the BridgeV2 contract and executed 12 irregular transactions across BNB Chain, Ethereum and Rootstock over roughly four minutes”
reviewerAttacker deposited 330 satoshis and made 12 irregular transactions across BNB Chain, Ethereum and Rootstock in about four minutesTwo independent outlets agree. - #4[confirmed][no action needed]in the summary
“KuCoin put the total protocol loss at 9.97 BTC (~$770,000)”
reviewerKuCoin put total protocol loss at 9.97 BTC (~$770,000)The figure is Symbiosis's preliminary estimate as relayed by KuCoin and CoinDesk. The page's attribution is fair. - #5[confirmed][no action needed]in the summary
“Symbiosis halted its native Bitcoin bridge, said it recovered about 15 BTC, offered a 20% bounty that expired unanswered”
reviewerSymbiosis recovered about 15 BTC and the 20% bounty deadline was September 13Multiple outlets agree. The 'unanswered' wording rests on reports that Symbiosis had not confirmed any response.