← Symbiosis Financereviewed 2026-11-01 · 12 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Symbiosis Finance against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
3 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #8[unverifiable][awaiting moderator]in section: Protocol Overview
“The protocol raised approximately $2 million in seed funding from investors including Amber Group, YZi Labs (formerly Binance Labs), Blockchain.com Ventures, Dragonfly Capital, The Spartan Group, and DAO Maker.”
reviewerSeed funding of about $2 million from named investorsCryptoRank blocked; LI.FI names different investors and no amount. - #10[unverifiable][awaiting moderator]in section: Team and Corporate Background
“All three principals are reported to be Russia-based.”
reviewerFounders, Russia-based, prior roles at SDT.group and ChangeNOWCited LI.FI page does not support these details. Crunchbase and Tracxn were not checked. - #12[unverifiable][awaiting moderator]in the timeline
“Public bug-bounty program goes live on Immunefi.”
reviewerBug-bounty live on Immunefi 2022-08-18Source blocked; the slug suggests it may not be about the bounty.
partially supported
3 claimsThe cited evidence supports part of the claim but not all of it.
- #5[partially supported][awaiting moderator]in the timeline
“Symbiosis team secures approximately 15 BTC in a multisig wallet and announces rerouting of Bitcoin swaps through Chainflip and THORChain.”
reviewerChainflip and THORChain rerouting announced on 2026-09-11Recovery and rerouting were reported Sept 13-14; the Sept 11 date for this entry is not supported by sources I could read. - #7[partially supported][awaiting moderator]in section: BridgeV2 Exploit — September 11, 2026
“A full technical post-mortem was subsequently published by the team, though it had not been widely circulated as of that date.”
reviewerPost-mortem not widely circulated while also described as published; internally inconsistentThe sections[2] account relies on the post-mortem, yet sections[4] and timeline[7] say none was circulated by Sept 14. The post-mortem date is unclear. - #9[partially supported][awaiting moderator]in the timeline
“Symbiosis Finance launches on mainnet, connecting multiple EVM and non-EVM networks via synthetic assets and a permissioned relayer network.”
reviewerMainnet launch March 2022Cited source supports early 2022 only; the March day-precision (2022-03-01) comes from elsewhere.
confirmed
6 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: BridgeV2 Exploit — September 11, 2026
“On September 11, 2026, at approximately 04:28 UTC, an attacker exploited a message-validation vulnerability in Symbiosis's BridgeV2 smart contract on BNB Chain.”
reviewerExploit occurred Sept 11, 2026 around 04:28 UTC on BridgeV2Date and time match Crypto Briefing. - #2[confirmed][no action needed]in section: BridgeV2 Exploit — September 11, 2026
“the attacker was able to liquidate only 4.39 WBTC through Uniswap v4 on Ethereum, realizing actual proceeds of approximately $336,000”
reviewerAttacker realized about $336,000 via 4.39 WBTC on Uniswap v4Confirmed. - #3[confirmed][no action needed]in section: BridgeV2 Exploit — September 11, 2026
“Using a deposit of approximately 330 satoshis (roughly $0.25 in Bitcoin), the attacker triggered twelve fraudulent deposit messages across BNB Chain, Ethereum, and Rootstock within four minutes”
reviewerTwo bugs: sender from calldata plus negative fee; twelve deposits across three chains in four minutesMechanism and counts match the post-mortem repost. - #4[confirmed][no action needed]in section: BridgeV2 Exploit — September 11, 2026
“Symbiosis estimates total losses to liquidity providers and affected users at 9.97 BTC, or approximately $770,000 at prevailing prices.”
reviewerTotal losses estimated 9.97 BTC (~$770,000)Figure is described as preliminary by Symbiosis; page says 'estimates', which is acceptable. - #6[confirmed][no action needed]in section: Post-Exploit Status and Recovery
“The 20% white-hat bounty deadline of September 13 passed without a public response from the attacker.”
reviewerBounty offer of 20% with Sept 13 deadline; Bitcoin Bridge offline, no restart timelineConsistent with source. - #11[confirmed][no action needed]in section: Structural Risk: Relayer Network Collusion Threshold
“The protocol's own documentation acknowledges that if two-thirds of the MPC nodes were to collude, they could pass a fraudulent message and drain user funds.”
reviewerMPC group up to 15 nodes; two-thirds collusion risk; veto group of 1-2 nodesThe claim is attributed to the protocol's own documentation, but I confirmed it only via LI.FI.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.